| 摘要 |
A method and system for regulating access by an access program to a data object residing in a storage system, which may be used to protect against data theft in a storage server. The storage server receives, from a client node, a certificate request for a certificate pertaining to access of the data object by the access program. The storage server validates the certificate request and in response, generates the certificate and transmits the certificate to the client node. The certificate request and the certificate each include a signature of the access program and an identifier of the data object. The storage server receives from the client node an I/O request for access of the data object by the access program. The storage server determines whether the I/O request is valid or invalid and processes the I/O request with privileged handling or degraded handling, respectively. |
| 主权项 |
1. A method for regulating access by an access program to a data object residing in a storage system, said method comprising:
receiving, by a storage server from a client node, a certificate request for a certificate pertaining to access of the data object by the access program, said storage system comprising the storage server and the data object, said client node comprising the access program, said certificate request comprising a signature of the access program and an identifier of the data object; said storage server validating the certificate request and in response, said storage server generating the certificate and transmitting the certificate to the client node, said certificate comprising the signature of the access program, the identifier of the data object, and a certificate authentication code for validating the certificate; after said transmitting the certificate, said storage server receiving from the client node an input/output (I/O) request for access of the data object by the access program; and said storage server determining whether the I/O request is valid or invalid and processing the I/O request with privileged handling or degraded handling, respectively. |
