【作者】 吴亚军；

【导师】 吉逸； 宛斌； 林殷；

【作者基本信息】 东南大学 ， 软件工程（专业学位）， 2016， 硕士

【摘要】 随着大数据时代迎来了新的革命浪潮,云打印等新兴技术也随之蓬勃兴起。但出于安全考虑,许多云存储平台没有开放各自的资源,使得云打印服务的数据来源相对封闭,导致当用户想使用某打印平台打印其他存储平台的资源时,只能先下载其他存储平台的资源,然后上传到云打印平台,而无法直接添加第三方资源实现云打印服务,这严重影响了用户的体验。但欲实现直接添加第三方资源又涉及到第三方资源授权安全的问题,如何安全有效的实现第三方资源授权成为了一个亟待解决的问题。针对上述问题,本文分析了最新的跨平台授权认证OAuth协议,借鉴公司产品的设计理念,利用HDFS分布式文件系统,基于MetaQ消息中间件机制,并采用目前很流行的MongoDB分布式内存数据库,提出了一种基于OAuth协议的云打印系统解决方案,用户可以使用云打印系统直接而又安全的获取第三方的云资源。云打印系统主要模块包括存储服务子系统,OAuth授权认证子系统以及云打印服务子系统,论文的主要工作包括以下几个方面：一,设计和实现了存储服务子系统。该子系统提供用户信息管理及资源存储服务,为云打印系统提供一种数据来源。二,设计和实现了OAuth授权认证子系统,该子系统为基于OAuth协议的云打印系统的核心模块,基于最新的OAuth授权认证协议,采用授权码模式进行资源的授权交互并采用SSL安全套阶层安全传输协议,为解决第三方资源授权问题提供了一种较为安全的方法。三,设计和实现了云打印服务子系统,该子系统为用户提供信息管理、资源管理、添加存储服务子系统资源以及订单管理服务,通过分布式文件系统对用户的资源文件进行存储,并对用户的资源设置身份拦截器以实现保护资源的目的,采用虚拟目录的方式对用户的资源进行管理；调用OAuth授权认证子系统暴露的接口实现添加第三方资源；订单管理主要应用最新的MetaQ消息中间件技术,实现订单消息的传输。本文的最后对基于OAuth协议的云打印系统进行了功能测试,性能测试和压力测试,验证了本系统的可用性、安全性以及鲁棒性。更多还原

【Abstract】 With the era of big data ushering the tide of revolution, the new technology such as cloud print is flourishing and rising. Many platforms of big data cloud storage do not open their resources due to security, which causing data source of cloud print relatively unitary and resource ntegration difficult. When users want to use a print platform to print the resources stored in other storage platform. They need to download the resources and upload them to print platform. However, they cannot add the third resources to print platform directly. The advantage of cloud print is not fully valued. Eventually it lead to the problems such as poor user experience. How to add the third resources safely and directly may involve the question of authorization of third party resources. How to realize authorization of third party resources safely and directly turns into a burning question.In view of the above problems, this thesis comes up with a solution, cloud print system based on OAuth, under the background of High resolution earth observation system designed by Institute of Electronics Chinese Academy of Science, analysing the latest Protocols of OAuth2.0, using the design idea of company’s leading products, taking the advantage of Hadoop Distributed File System(HDFS), based on the MetaQ mechanism which is message oriented middleware, making use of MongoDB distributed database which is high reliability and high performance.This thesis focuses on the design and implementation of cloud print system based on OAuth including storage service system, OAuth authorization system and cloud print system. The main work of this thesis is listed as follows. At the outset, a storage service system is designed and implemented, providing users the service of user management and resource storage. It also provides user resource data for cloud print system. Following this, design and implement an OAuth authorization system. The system is the kernel of cloud print system based on OAuth protocol. It comes up with a relatively safe solution to deal with the authorization of third party resources under the latest protocol of OAuth2.0. This system following the protocol of Secure Sockets Layer(SSL) uses authorization code mode to realize authorization interaction. Finally, design and implement a cloud print system. It provides service such as service of user management, resource storage and address management. This system storage files by using distributed file system. With the purpose of security, this system protects user resource by setting the interceptor and manages user resource by the way of virtual Directory. The service of order management applies the MetaQ mechanism to realize message delivery.At the end of the thesis, function testing, performance testing and stress testing are carried out to verify the availablility, security and robustness.更多还原