【摘要】 【目的】针对计算平台与交互式分析工作台的文件共享需求,设计无认证文件共享机制,以便捷的公共链接方式,实现文件即时安全分享。【方法】基于INK全域认证体系,使用Linux UGO权限模型与元数据管理构建权限控制逻辑,采用XRootD框架屏蔽底层异构分布式存储差异,通过多维度安全机制保障数据传输与访问安全,最终形成精准管控的无认证文件共享方案。【结果】已成功部署于INK交互式分析工作台,支持安全、快速生成公共链接完成数据分享;采用XRootD框架的文件下载速度较单服务器普通下载仅下降3.2%,在分布式存储场景下具备优异的数据访问性能。【结论】全域认证、异构存储适配及精细化权限管控能力,为跨平台分布式环境下的文件共享提供了完整且高效的解决方案。更多还原

【Abstract】 [Objective] To meet the file sharing needs in the computational platform and interactive analysis workbench, this paper designs an authentication-free mechanism for instant, secure sharing via public links. [Methods] Leveraging the INK global authentication framework, permission control logic is implemented using the Linux UGO permission model in conjunction with metadata management. The XRootD framework is employed to abstract underlying differences in heterogeneous distributed storage systems. Multi-dimensional security mechanisms are integrated to safeguard data transmission and access, culminating in a precisely controlled authentication-free file-sharing paradigm. [Results] The mechanism has been successfully deployed on INK workbench, allowing secure, fast public link generation for sharing. XRootD downloads are only 3.2% slower than ordinary downloads from a single-server, with strong performance in distributed storage. [Conclusions] Global authentication, heterogeneous storage adaptation, and fine-grained controls deliver a complete, efficient solution for cross-platform distributed file sharing.更多还原