一种基于Kerberos和HDFS的数据存储平台访问控制策略

摘要

重点关注云存储在访问安全性和隐私安全性上的两个问题,设计面向多租户的安全数据存储机制和用户访问控制机制,并结合企业实际需求,向租户提供安全、按需、实时和可扩展的存储服务.基于 Kerberos的多租户访问控制策略将提升云存储平台的安全性,简化HDFS权限管理的复杂度,提高云存储平台权限管理的交互性能.%Focusing on two vital problems of cloud storage--access security problem and privacy security problem,a multi-tenant oriented data storage mechanism and a user access control policy is designed.The storage platform takes the enterprise actual demand as reference,provides sage,on demand,real-time,extensible service to users.The access control policy based on Kerberos and HDFS will enhance the security of the storage platform,simplify the complexity of privilege management of HDFS,and improve interaction performance of the storage platform in privilege manage-ment part.