Performing authorization control in a cloud storage system
First Claim
1. A computer apparatus for performing authorization control on file block access, comprising:
- a computing system with at least one processor and memory, the processor being configured to;
divide a file into a plurality of file blocks;
embed tag data including at least file block authorization information into each file block;
receive an access request to a component of a file comprising a file block comprising file data wherein the file block is embedded with tag data comprising at least file block authorization information;
retrieve the file block;
extract the file block authorization information from tag data embedded in the file block;
determine whether the access request matches the extracted file block authorization information; and
perform the access request if the access request matches the extracted file block authorization information by merging the file data in file blocks that constitute the file so as to perform an operation with respect to the file and after completion of the operation with respect to the file, embedding the tag data into the file blocks upon dividing the merged file data file into file blocks for storing.
1 Assignment
0 Petitions
Accused Products
Abstract
A method, apparatus and computer program product for performing authorization control in a cloud storage system. The method comprises: receiving an access request to a file block, wherein the file block is embedded with tag data comprising at least file block authorization information; retrieving the file block; extracting the file block authorization information from the tag data; determining whether the access request matches the file block authorization information; and performing the access request if the access request matches the file block authorization information. Effective authorization control may be performed in a cloud storage system.
-
Citations
14 Claims
-
1. A computer apparatus for performing authorization control on file block access, comprising:
-
a computing system with at least one processor and memory, the processor being configured to; divide a file into a plurality of file blocks; embed tag data including at least file block authorization information into each file block; receive an access request to a component of a file comprising a file block comprising file data wherein the file block is embedded with tag data comprising at least file block authorization information; retrieve the file block; extract the file block authorization information from tag data embedded in the file block; determine whether the access request matches the extracted file block authorization information; and perform the access request if the access request matches the extracted file block authorization information by merging the file data in file blocks that constitute the file so as to perform an operation with respect to the file and after completion of the operation with respect to the file, embedding the tag data into the file blocks upon dividing the merged file data file into file blocks for storing. - View Dependent Claims (2, 3, 4, 5, 6, 7)
-
-
8. A computer program product configured to perform authorization control on file block access, the computer program product comprising:
-
a computer readable storage memory device storing therein processor executable instructions stored therein, the processor executable instructions embodied within computer readable program code, the computer readable program code comprising; computer readable program code for dividing a file into a plurality of file blocks; computer readable program code for embedding tag data including at least file block authorization information into each file block; computer readable program code for receiving an access request to a component of a file comprising a file block comprising file data, wherein the file block is embedded with tag data comprising at least file block authorization information; computer readable program code for retrieving the file block; computer readable program code for extracting file block authorization information from tag data embedded in the file block; computer readable program code for determining whether the access request matches the extracted file block authorization information; and computer readable program code for performing the access request if the access request matches the extracted file block authorization information by merging the file data in file blocks that constitute the file so as to perform an operation with respect to the file and after completion of the operation with respect to the file, embedding the tag data into the file blocks upon dividing the merged file data file into file blocks for storing. - View Dependent Claims (9, 10, 11, 12, 13, 14)
-
Specification