Public and private hybrid distributed cloud storage system and cloud storage method

• US 9,736,186 B2
• Filed: 10/21/2013
• Issued: 08/15/2017
• Est. Priority Date: 06/08/2013
• Status: Active Grant

• Current Assignee: Beijing Gupanchuangshi Science and Technology Development Co., Ltd.
• Original Assignee: Beijing Gupanchuangshi Science and Technology Development Co., Ltd.
• Inventors: Zhou, Haiyan
• Primary Examiner(s): Thiaw, Catherine
• Application Number:
  US14/896,670
• Publication Number:
  US 20160112455A1
• Time in Patent Office: 1,394 Days
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/40 Support for services or applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/108 characterised by resources being split in blocks or fragments
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

Public and private hybrid distributed cloud storage system and cloud storage method including an application system, a segmentation aggregation system, a public storage system and a private storage system. The application system provides original complete data and initiates an access request to the segmentation aggregation system. The segmentation aggregation system divides original complete data into data fragments and distributes to said public storage system and private storage system according to a preset storage proportion and receives the fragments returned by the public and private storage systems and aggregates them into the complete data, and transfers to said application system. The public storage system manages, authenticates and stores fragments. The private system manages, authenticates, counts, controls and stores fragments. The method, based on the cloud storage system, includes logging data and reading data. This invention solves problems of limited capacity private storage systems, inadequate bandwidth and security vulnerable public storage system.

Claims

1. A public-private hybrid distributed cloud storage system, comprising:

an application system,

a segmentation aggregation system,

a public storage system and a private storage system implemented in hardware, wherein

said application system is connected with said segmentation aggregation system, providing original complete data to said segmentation aggregation system, initiating an access request and providing user registration information to the public storage system or the private storage system through the segmentation aggregation system; and

also connected to said private storage system, controlling said private storage system;

said segmentation aggregation system is connected to said public storage system and said private storage system, dividing the original complete data into a number of data fragments, and distributing said data fragments to said public storage system and said private storage system according to a preset storage proportion; and

connected with said application system, receiving the data fragments returned by said public storage system and said private storage system according the access request initiated by said application system, and then aggregating said data fragments returned by said public storage system and said private storage system into the complete data, and transferring the aggregated complete data to said application system;

said public storage system is configured for managing, authenticating and storing the data fragments transmitted by said segmentation aggregation system; and

said private storage system is configured for managing, authenticating, storing, controlling and counting the data fragments transmitted by said segmentation aggregation system;

wherein the public-private hybrid distributed cloud storage system comprises at least an additional application system, when logging data or reading data, the application system and the additional application system negotiate with each other an access mechanism by means of an offline negotiation or transmitting a distribution table containing the public storage system and the private storage system jointly connected, so as to ensure all the application systems are jointly connected into a storage agency.

2. The public-private hybrid distributed cloud storage system according to claim 1, wherein said segmentation aggregation system is provided with a distribution table, which is configured to record critical distribution information, wherein said critical distribution information includes a distribution pattern, a distribution address and a data combination rule.

3. The public-private hybrid distributed cloud storage system according to claim 1, wherein said public-private hybrid distributed cloud storage system includes one or more public storage systems, and each public storage system includes several storage units distributed in different regions.

4. The public-private hybrid distributed cloud storage system according to claim 1, wherein

said public storage system is configured to synchronize user registration information to a data fragment authentication module, and automatically allocate management right, storage right and calling right of the data fragments, according to the user registration information;

execute authentication on the user versus the public storage system; and

store the data fragments.

5. The public-private hybrid distributed cloud storage system according to claim 1, wherein

said private storage system is configured to synchronize user registration information to a data fragment authentication module, and automatically allocate management right, storage right and calling right of the data fragments, according to the user registration information;

execute authentication on the user versus the private storage system;

store the data fragments;

feed back accessing information to a data owner, and after obtaining verification from the data owner, control data reading progress in a way of responding to a data visitor; and

count data accessing records.

6. A cloud storage method for a public-private hybrid distributed cloud storage system including an application system, a segmentation aggregation system, a public storage system and a private storage system, the method comprising:

providing, by said application system connected with said segmentation aggregation system, original complete data to said segmentation aggregation system;

initiating an access request and providing user registration information to the public storage system or the private storage system through the segmentation aggregation system connected to said private storage system, and controlling said private storage system;

dividing, by said segmentation aggregation system connected to said public storage system and said private storage system implemented in hardware, the original complete data into a number of data fragments,

distributing said data fragments to said public storage system and said private storage system according to a preset storage proportion;

said segmentation aggregation system connected with said application system, receiving the data fragments returned by said public storage system and said private storage system according the access request initiated by said application system, then aggregating said data fragments returned by said public storage system and said private storage system into the complete data, and transferring the aggregated complete data to said application system;

managing, authenticating and storing the data fragments transmitted by said segmentation aggregation system by public storage system; and

managing, authenticating, storing, controlling and counting by said private storage system, the data fragments transmitted by said segmentation aggregation system, the method including a step of logging data and a step of reading data, wherein

the step of logging data includes;

providing by the application system the original complete data to the segmentation aggregation system;

dividing by the segmentation aggregation system the original complete data into data fragments, enciphering the data fragments, and then distributing said data fragments to the public storage system and the private storage system according to a preset storage proportion, and while recording critical distribution information in said segmentation aggregation system;

managing, authenticating and storing by said public storage system said data fragments distributed by said segmentation aggregation system, and managing, authenticating, storing, controlling and counting by said private storage system the data fragments distributed by said segmentation aggregation system;

said step of reading data includes;

initiating by the application system an access request to the segmentation aggregation system, to query the critical distribution information;

receiving by the segmentation aggregation system the data fragments returned by the public storage system and the private storage system according to the critical distribution information, then deciphering the data fragments and aggregating the data fragments into a complete document; and

transferring by said segmentation aggregation system the aggregated complete document to said application system;

wherein said public-private hybrid distributed cloud storage system comprises at least an additional application system, when the application system and the additional application system perform the steps of logging data or reading data, the application system and the additional application system negotiate with each other an access mechanism by means of an offline negotiation or transmit a distribution table containing the public storage system and the private storage system jointly connected, so as to ensure all the application systems are jointly connected into a storage agency.

7. The cloud storage method according to claim 6, wherein the preset storage proportion is randomly set by the application system according to a using scenario and/or using demands of the user.

8. The cloud storage method according to claim 6, wherein managing, authenticating, storing, controlling and counting by said private storage system the data fragments distributed by said segmentation aggregation system further includes:

storing data fragments and synchronizing the user registration information to a data fragment authentication module of the private storage structure, executing authentication on a user versus the private storage system, and then automatically assigning management right, storage right and calling right of the public storage system according to the user registration information, and under the circumstance that the user has passed the authentication, feeding back accessing information to the a data owner through the private storage system; and

after obtaining verification from the data owner, controlling data reading progress in a way of responding to the a data visitor, and being able of counting data accessing records at any time.

9. The cloud storage method according to claim 6, wherein the critical distribution information includes a distribution pattern, a distribution address, and a data combination rule.