【作者】 鲁春怀；

【导师】 卢萍；

【作者基本信息】 华中科技大学 ， 计算机系统结构， 2006， 硕士

【摘要】 基于对象存储(OBS)系统具有较好的安全性,能实现跨平台的数据共享,并具有高性能和可扩展性。基于对象存储设备(OSD)是OBS系统中智能化的网络存储节点,它能给用户提供一组基于对象的访问接口,并自主化地管理其内存储的对象。基于对象的文件系统是OSD软件系统的核心,OSDFS是OSD中基于对象的文件系统的一种简单实现,它是在Linux的EXT2文件系统基础上实现的一种逻辑对象文件系统,通过将OSD中的对象映射为底层的EXT2文件来实现对象的存储管理。为了优化OSD中对象的存储,提出了一种用于OSD中的智能化的基于对象的文件系统—SOBFS,它能根据对象的属性使得基于不同应用的对象采用不同的存储管理机制。SOBFS是一个文件系统容器,可以包含多种基于不同应用的文件系统,目前包含了两种文件系统:通用对象文件系统和媒体对象文件系统,分别用于存储普通文档、网页等小对象和大的媒体对象。通过与OSDFS进行理论上的比较,SOBFS显示出了更好的性能。基于OSD中对象存储的安全性需求,提出了一种用于OSD的安全机制,它采用的基于证书的访问控制机制保证了用户对OSD中对象的合法访问以及客户和OSD之间所交换的命令和数据的完整性,而基于对象的文件系统的安全性又保证了OSD中所存放的数据的保密性,而且系统仍然具有足够的灵活性实现用户之间数据的共享。另外,实验结果表明,安全开销给系统造成的性能损失也是比较小的。更多还原

【Abstract】 Object-Based Storage (OBS) system is secure and flexable to implement data-sharing between different platforms, also it is of high performance and scalability. Object-based Storage Device (OSD) is intelligent network storage node in object-based storage system, it can provide users with object-based acccess interface, and implement autonomous storage management for objects in it.Object-based file system is kernel of OSD software system, OSDFS is a simple implemention of it. OSDFS is a logical object file system based on ext2 file system of linux, it is in charge of mapping between objects and ext2 files to implement storage management of objects in OSD.In order to optimize storage of objects in OSD, a smart object-based file system (SOBFS) is proposed for OSD, it can make objects for different applications adopt different storage management strategy according to their attributes. SOBFS is a file systems container, and it can contain several file systems for different applications. At present, it contains two file systems: general object file system and media object file system, one is for small objects such as general documents, webs and so on, and the other is for large media objects. Compared with OSDFS theoretically, SOBFS reveals better performance.Considering security of objects in OSD, a security mechanism for OSD is proposed. The access control mechanism based on credential guarantees user’s legal access to objects in OSD and maintains integrity of commands and data between users and OSD. Also, the security of object-based file system assures privacy of data in OSD, and the system is still enough flexible to implement data share between users. In addition, experimental results show that the system does not impose much performance penalty for security overhead更多还原