面向IMA的网络文件系统访问控制分析与设计

摘要

In order to solve the problem of access control in network file system for IMA system, we analyse access control and put forward a design scheme of access control. We use the Network File Lock to realize multiple partitions mutually exclusive access to remote files by locking files and unlocking files. We use the module of access control to authenticate the rights of the user. The user can access to files only if through verification. Log files save the whole operation process of accessing remote files. The paper draws principle of network file lock and purview control and modular of log.%为了解决面向IMA的网络文件系统访问控制问题,分析了其中的访问控制,并提出一种访问控制的设计方案.采用网络文件锁,通过对文件的上锁和解锁,实现多个分区互斥访问远程文件；使用权限控制模块验证用户对文件的访问权限,用户通过验证后才能访问文件；日志文件记录整个访问远程文件的过程.给出了网络文件锁、权限控制和日志模块的工作原理.