CN115580409A - Distributed data storage access method and system based on object storage - Google Patents
Distributed data storage access method and system based on object storage Download PDFInfo
- Publication number
- CN115580409A CN115580409A CN202211192223.3A CN202211192223A CN115580409A CN 115580409 A CN115580409 A CN 115580409A CN 202211192223 A CN202211192223 A CN 202211192223A CN 115580409 A CN115580409 A CN 115580409A
- Authority
- CN
- China
- Prior art keywords
- storage
- instruction
- data
- access
- feedback
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/083—Network architectures or network communication protocols for network security for authentication of entities using passwords
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/14—Session management
- H04L67/141—Setup of application sessions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
- H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
Description
技术领域technical field
本发明涉及一种分布式存储系统,尤其是涉及一种基于对象存储的分布式数据存储访问方法和系统。The present invention relates to a distributed storage system, in particular to a distributed data storage access method and system based on object storage.
背景技术Background technique
随着数字化转型的加速,机构对数据的统一管理越来越迫切。传统存储系统采用集中的存储服务器存放所有数据,存储服务器成为系统性能的瓶颈,也是可靠性和安全性的焦点,不能满足大规模存储应用的需要。分布式存储系统,采用可扩展的系统结构,利用多台存储服务器分担存储负荷,利用位置服务器定位存储信息,将数据分散存储在局域网内多台独立的设备上,它不但提高了系统的可靠性、可用性和存取效率,还易于扩展。分布式存储系统可以很好的解决海量文件存储的问题,良好的扩展性以及可靠性,可满足海量数据的存储需求。With the acceleration of digital transformation, the unified management of data by institutions is becoming more and more urgent. Traditional storage systems use centralized storage servers to store all data. Storage servers become the bottleneck of system performance and the focus of reliability and security, which cannot meet the needs of large-scale storage applications. The distributed storage system adopts a scalable system structure, uses multiple storage servers to share the storage load, uses location servers to locate and store information, and disperses and stores data on multiple independent devices in the LAN, which not only improves the reliability of the system , usability and access efficiency, and easy to expand. The distributed storage system can well solve the problem of massive file storage, with good scalability and reliability, it can meet the storage requirements of massive data.
但是,对于大型机构,各分支机构分散在不同的区域,每个分支机构可能都要大量的数据需要存储,如果数据集中存储在总部,网络带宽成本高、存储效率低;如果各分支独立存储,又失去对数据的统一管理。However, for a large organization, each branch is scattered in different regions, and each branch may need to store a large amount of data. If the data is stored centrally at the headquarters, the cost of network bandwidth is high and the storage efficiency is low; if each branch is stored independently, And lost the unified management of data.
发明内容Contents of the invention
本发明的目的就是为了克服上述现有技术存在的缺陷而提供一种能够解决跨地域存储性能问题、又能满足统一管理要求的基于对象存储的分布式数据存储访问方法和系统。The purpose of the present invention is to provide an object storage-based distributed data storage access method and system that can solve the problem of cross-regional storage performance and meet the requirements of unified management in order to overcome the above-mentioned defects in the prior art.
本发明的目的可以通过以下技术方案来实现:The purpose of the present invention can be achieved through the following technical solutions:
第一方面,本发明提供一种基于对象存储的分布式数据存储访问方法,运行于一服务端,包括就近存储步骤、就近访问步骤和统一管理步骤,其中,In the first aspect, the present invention provides a method for accessing distributed data storage based on object storage, which runs on a server and includes the steps of nearby storage, nearby access and unified management, wherein,
所述就近存储步骤包括:Described nearest storage step comprises:
101)接收用户登录信息,基于预先存储的站点信息表,判断是否认证通过该用户登录信息,若是,则执行步骤102),若否,则反馈登录失败信息;101) receiving user login information, based on the pre-stored site information table, judging whether the user login information is passed through the authentication, if so, then perform step 102), if not, feedback login failure information;
102)接收存储位置请求,根据所述站点信息表确定对应的对象存储,生成第一反馈指令,该第一反馈指令带有签名及有效期;102) Receive a storage location request, determine the corresponding object storage according to the site information table, and generate a first feedback instruction, the first feedback instruction has a signature and a validity period;
103)判断是否收到存储成功信息,若是,则生成并保存数据记录,所述数据记录包括数据ID、所属用户和存储位置,若否,则结束;103) Judging whether the storage success information is received, if so, then generate and save the data record, the data record includes the data ID, the user and the storage location, if not, then end;
所述就近访问步骤包括:The nearby visit steps include:
201)接收用户登录信息,基于预先存储的站点信息表,判断是否认证通过该用户登录信息,若是,则执行步骤202),若否,则反馈登录失败信息;201) receiving user login information, based on the pre-stored site information table, judging whether the user login information is passed through the authentication, if so, then perform step 202), if not, feedback login failure information;
202)接收查询指令,查找是否存在与该查询指令匹配的数据记录,若是,则反馈所述数据记录,若否,则结束;202) Receive a query instruction, find out whether there is a data record matching the query instruction, if so, then feed back the data record, if not, then end;
203)接收访问指令,该访问指令包含数据ID和用户登录信息,基于所述访问指令查询获得对应的存储地址,生成第二反馈指令,该第二反馈指令带有签名及有效期;203) Receive an access instruction, the access instruction includes data ID and user login information, query and obtain the corresponding storage address based on the access instruction, and generate a second feedback instruction, the second feedback instruction has a signature and a validity period;
所述统一管理步骤包括:The unified management steps include:
接收记录查询指令,该记录查询指令包括管理员登录信息,判断所述管理员登录信息是否认证通过,若是,则反馈所有数据记录。Receive a record query instruction, the record query instruction includes administrator login information, determine whether the administrator login information is authenticated, and if so, feed back all data records.
进一步地,所述站点信息表包括总站点和多个分站点,每一站点配置有对应站点的对象存储信息和用户登录信息。Further, the site information table includes a main site and multiple sub-sites, and each site is configured with object storage information and user login information of a corresponding site.
进一步地,所述用户登录信息包括用户名和密码。Further, the user login information includes username and password.
第二方面,本发明提供一种基于对象存储的分布式数据存储访问方法,运行于一客户端,包括就近存储步骤和就近访问步骤,其中,In the second aspect, the present invention provides a method for accessing distributed data storage based on object storage, which runs on a client and includes a nearby storage step and a nearby access step, wherein,
所述就近存储步骤包括:Described nearest storage step comprises:
101)通过用户登录信息和服务端地址建立与服务端的连接后,发送存储位置请求;101) After establishing a connection with the server through the user login information and the server address, send a storage location request;
102)实时检测是否接收到第一反馈指令,若是,则执行步骤103),若否,则返回步骤101),所述第一反馈指令为根据站点信息表确定的对应的对象存储生成,所述站点信息表存储于服务端,该第一反馈指令带有签名及有效期;102) Real-time detection of whether the first feedback instruction is received, if yes, then perform step 103), if not, then return to step 101), the first feedback instruction is generated according to the corresponding object storage determined by the site information table, the The site information table is stored on the server, and the first feedback command has a signature and a validity period;
103)根据所述第一反馈指令在步骤102)中的对象存储中进行数据存储;103) performing data storage in the object storage in step 102) according to the first feedback instruction;
所述就近访问步骤包括:The nearby visit steps include:
201)通过用户登录信息和服务端地址建立与服务端的连接后,发送查询指令;201) After establishing a connection with the server through the user login information and the server address, sending a query command;
202)实时检测是否接收到与所述查询指令匹配的数据记录,若是,则执行步骤203),若否,则结束;202) Real-time detection whether the data records matched with the query instruction are received, if so, then perform step 203), if not, then end;
203)发送访问指令,该访问指令包含数据ID和用户登录信息,实时检测是否接收到第二反馈指令,若是,则执行步骤204),若否,则返回步骤203),所述第二反馈指令基于查询获得的对应的存储地址生成,该第二反馈指令带有签名及有效期;203) Send an access instruction, the access instruction includes data ID and user login information, detects in real time whether the second feedback instruction is received, if so, then execute step 204), if not, then return to step 203), the second feedback instruction Generated based on the corresponding storage address obtained from the query, the second feedback instruction has a signature and a validity period;
204)根据所述第二反馈指令进行数据访问。204) Perform data access according to the second feedback instruction.
进一步地,所述站点信息表包括总站点和多个分站点,每一站点配置有对应站点的对象存储信息和用户登录信息。Further, the site information table includes a main site and multiple sub-sites, and each site is configured with object storage information and user login information of a corresponding site.
进一步地,所述用户登录信息包括用户名和密码。Further, the user login information includes username and password.
第三方面,本发明提供一种服务端,包括一个或多个处理器、存储器和被存储在存储器中的一个或多个程序,所述一个或多个程序包括用于执行如上所述基于对象存储的分布式数据存储访问方法的指令。In a third aspect, the present invention provides a server, including one or more processors, memory, and one or more programs stored in the memory, and the one or more programs are used to execute the above-mentioned object-based Stored instructions for distributed data storage access methods.
第四方面,本发明提供一种客户端,包括一个或多个处理器、存储器和被存储在存储器中的一个或多个程序,所述一个或多个程序包括用于执行如上所述基于对象存储的分布式数据存储访问方法的指令。In a fourth aspect, the present invention provides a client, including one or more processors, memories, and one or more programs stored in the memories, the one or more programs including being used to execute the above-mentioned object-based Stored instructions for distributed data storage access methods.
第五方面,本发明提供一种基于对象存储的分布式数据存储访问系统,包括服务端和客户端,其中,In the fifth aspect, the present invention provides a distributed data storage access system based on object storage, including a server and a client, wherein,
所述服务端维护一站点信息表,基于该站点信息表对用户登录信息进行认证;接收存储位置请求,根据所述站点信息表确定对应的对象存储,生成第一反馈指令,该第一反馈指令带有签名及有效期;在收到存储成功信息时,生成并保存数据记录,所述数据记录包括数据ID、所属用户和存储位置;接收记录查询指令,该记录查询指令包括管理员登录信息,判断所述管理员登录信息是否认证通过,若是,则反馈所有数据记录;The server maintains a site information table, and authenticates user login information based on the site information table; receives a storage location request, determines the corresponding object storage according to the site information table, and generates a first feedback instruction, the first feedback instruction With a signature and a validity period; when the successful storage information is received, a data record is generated and saved, and the data record includes the data ID, the user and the storage location; the record query command is received, and the record query command includes the login information of the administrator, and the judgment Whether the administrator login information is authenticated, if so, all data records are fed back;
所述客户端通过用户登录信息和服务端地址建立与服务端的连接,需要进行数据存储时,发送存储位置请求,在接收到第一反馈指令后,根据所述第一反馈指令进行数据存储,其中,所述第一反馈指令为根据站点信息表确定的对应的对象存储生成,该第一反馈指令带有签名及有效期;需要进行数据访问时,发送查询指令,若接收到与所述查询指令匹配的数据记录,则发送访问指令,该访问指令包含数据ID和用户登录信息,在接收到第二反馈指令后,根据所述第二反馈指令进行数据访问,所述第二反馈指令基于查询获得的对应的存储地址生成,该第二反馈指令带有签名及有效期。The client establishes a connection with the server through the user login information and the address of the server, sends a storage location request when data storage is required, and stores the data according to the first feedback instruction after receiving the first feedback instruction, wherein , the first feedback instruction is generated according to the corresponding object storage determined by the site information table, and the first feedback instruction has a signature and a validity period; when data access is required, a query instruction is sent, and if a query matching the query instruction is received data records, send an access instruction, the access instruction includes data ID and user login information, after receiving the second feedback instruction, perform data access according to the second feedback instruction, the second feedback instruction is based on the query obtained A corresponding storage address is generated, and the second feedback command has a signature and a validity period.
进一步地,所述客户端替换为API模块。Further, the client is replaced by an API module.
与现有技术相比,本发明实现数据统一管理的同时,通过就近存储、就近访问来提升存储的效率,解决跨地域、多分支机构面临的数据统一管理难、跨地域带宽成本高、效率低等问题。具体地,本发明具有以下有益效果Compared with the existing technology, the present invention not only realizes unified management of data, but also improves storage efficiency through nearby storage and access, and solves the difficulties of unified data management, high cost of cross-regional bandwidth, and low efficiency faced by cross-regional and multi-branch organizations. And other issues. Specifically, the present invention has the following beneficial effects
1)通过站点、用户、对象存储的对应关系,将用户的数据就近存储在用户所在站点的对象存储,提升存储效率。1) Through the corresponding relationship between sites, users, and object storage, the user's data is stored in the object storage of the user's site nearby to improve storage efficiency.
2)用户的数据都存储在用户所在站点的对象存储,访问这些数据无需跨地域,访问效率高。2) The user's data is stored in the object storage of the user's site, and access to these data does not need to cross regions, and the access efficiency is high.
3)总站点记录了所有的用户数据,方便数据的统一管理。3) The main site records all user data, which facilitates the unified management of data.
附图说明Description of drawings
图1为本发明就近存储或就近访问的原理示意图;Fig. 1 is a schematic diagram of the principle of nearby storage or nearby access in the present invention;
图2为本发明统一管理的原理示意图。Fig. 2 is a schematic diagram of the principle of unified management in the present invention.
具体实施方式detailed description
下面结合附图和具体实施例对本发明进行详细说明。本实施例以本发明技术方案为前提进行实施,给出了详细的实施方式和具体的操作过程,但本发明的保护范围不限于下述的实施例。The present invention will be described in detail below in conjunction with the accompanying drawings and specific embodiments. This embodiment is carried out on the premise of the technical solution of the present invention, and detailed implementation and specific operation process are given, but the protection scope of the present invention is not limited to the following embodiments.
一方面,本发明提供一种基于对象存储的分布式数据存储访问方法,运行于一服务端,包括就近存储步骤、就近访问步骤和统一管理步骤。服务端中预先部署有站点信息表,该站点信息表包括总站点和多个分站点,每一站点配置有对应站点的对象存储信息和用户登录信息。总站点可对应总部或总部员工,分站点可对应分支机构或分支机构员工。On the one hand, the present invention provides a method for accessing distributed data storage based on object storage, which runs on a server and includes the steps of nearby storage, nearby access and unified management. A site information table is pre-deployed in the server, and the site information table includes a main site and multiple sub-sites, and each site is configured with object storage information and user login information of the corresponding site. The main site can correspond to the headquarters or employees of the headquarters, and the sub-sites can correspond to branches or employees of branches.
上述各步骤具体描述如下。The above steps are specifically described as follows.
就近存储步骤包括:Nearby storage steps include:
101)接收用户登录信息,包括用户名和密码,基于预先存储的站点信息表,判断是否认证通过该用户登录信息,若是,则执行步骤102),若否,则反馈登录失败信息;101) receiving user login information, including user name and password, based on the pre-stored site information table, judging whether the user login information is passed through the authentication, if so, then perform step 102), if not, feedback login failure information;
102)接收存储位置请求,根据站点信息表确定对应的对象存储,生成第一反馈指令,该第一反馈指令带有签名及有效期;102) Receive a storage location request, determine the corresponding object storage according to the site information table, and generate a first feedback instruction, the first feedback instruction has a signature and a validity period;
103)判断是否收到存储成功信息,若是,则生成并保存数据记录,数据记录包括数据ID、所属用户和存储位置,若否,则结束。103) Judging whether the storage success information is received, if yes, then generate and save the data record, the data record includes the data ID, the user and the storage location, if not, then end.
就近访问步骤包括:Nearby visit steps include:
201)接收用户登录信息,基于预先存储的站点信息表,判断是否认证通过该用户登录信息,若是,则执行步骤202),若否,则反馈登录失败信息;201) receiving user login information, based on the pre-stored site information table, judging whether the user login information is passed through the authentication, if so, then perform step 202), if not, feedback login failure information;
202)接收查询指令,查找是否存在与该查询指令匹配的数据记录,若是,则反馈数据记录,若否,则结束;202) Receive the query instruction, find out whether there is a data record matching the query instruction, if so, feed back the data record, if not, then end;
203)接收访问指令,该访问指令包含数据ID和用户登录信息,基于访问指令查询获得对应的存储地址,生成第二反馈指令,该第二反馈指令带有签名及有效期。203) Receive an access instruction, the access instruction includes the data ID and user login information, query and obtain the corresponding storage address based on the access instruction, and generate a second feedback instruction, the second feedback instruction has a signature and a validity period.
统一管理步骤包括:接收记录查询指令,该记录查询指令包括管理员登录信息,判断管理员登录信息是否认证通过,若是,则反馈所有数据记录。The unified management step includes: receiving a record query instruction, the record query instruction includes administrator login information, judging whether the administrator login information is authenticated, and if so, feeding back all data records.
上述功能如果以软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本发明的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本发明各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。具体地,上述计算机可读取存储介质可存储于一服务端中。If the above functions are realized in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes. . Specifically, the above-mentioned computer-readable storage medium may be stored in a server.
第二方面,本发明还提供一种运行于客户端的基于对象存储的分布式数据存储访问方法,包括就近存储步骤和就近访问步骤,客户端与服务端进行通信交互。In the second aspect, the present invention also provides an object-storage-based distributed data storage access method running on a client, including a nearby storage step and a nearby access step, and the client communicates and interacts with the server.
上述各步骤具体描述如下。The above steps are specifically described as follows.
就近存储步骤包括:Nearby storage steps include:
101)通过用户登录信息和服务端地址建立与服务端的连接后,发送存储位置请求;101) After establishing a connection with the server through the user login information and the server address, send a storage location request;
102)实时检测是否接收到第一反馈指令,若是,则执行步骤103),若否,则返回步骤101),第一反馈指令为根据站点信息表确定的对应的对象存储生成,站点信息表存储于服务端,该第一反馈指令带有签名及有效期;102) detect in real time whether to receive the first feedback instruction, if so, then perform step 103), if not, then return to step 101), the first feedback instruction is generated according to the corresponding object storage determined by the site information table, and the site information table stores On the server side, the first feedback command has a signature and an expiration date;
103)根据第一反馈指令在步骤102)中的对象存储中进行数据存储。103) Perform data storage in the object storage in step 102) according to the first feedback instruction.
就近访问步骤包括:Nearby visit steps include:
201)通过用户登录信息和服务端地址建立与服务端的连接后,发送查询指令;201) After establishing a connection with the server through the user login information and the server address, sending a query command;
202)实时检测是否接收到与查询指令匹配的数据记录,若是,则执行步骤203),若否,则结束;202) detect in real time whether to receive the data record matched with the query instruction, if so, then perform step 203), if not, then end;
203)发送访问指令,该访问指令包含数据ID和用户登录信息,实时检测是否接收到第二反馈指令,若是,则执行步骤204),若否,则返回步骤203),第二反馈指令基于查询获得的对应的存储地址生成,该第二反馈指令带有签名及有效期;203) Send an access instruction, the access instruction includes data ID and user login information, detects in real time whether the second feedback instruction is received, if so, then execute step 204), if not, then return to step 203), the second feedback instruction is based on the query The obtained corresponding storage address is generated, and the second feedback command has a signature and a validity period;
204)根据第二反馈指令进行数据访问。204) Perform data access according to the second feedback instruction.
上述功能如果以软件功能单元的形式实现并作为独立的产品销售或使用时,可以存储在一个计算机可读取存储介质中。基于这样的理解,本发明的技术方案本质上或者说对现有技术做出贡献的部分或者该技术方案的部分可以以软件产品的形式体现出来,该计算机软件产品存储在一个存储介质中,包括若干指令用以使得一台计算机设备(可以是个人计算机,服务器,或者网络设备等)执行本发明各个实施例所述方法的全部或部分步骤。而前述的存储介质包括:U盘、移动硬盘、只读存储器(ROM,Read-Only Memory)、随机存取存储器(RAM,Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。具体地,上述计算机可读取存储介质可存储于一客户端中。If the above functions are realized in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (which may be a personal computer, a server, or a network device, etc.) execute all or part of the steps of the methods described in various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes. . Specifically, the above-mentioned computer-readable storage medium may be stored in a client.
第三方面,本发明还提供一种基于对象存储的分布式数据存储访问系统,可将该系统简称为OSS网关,可以统一管理分散在各地域的对象存储,满足各地域数据就近存储、统一管理的要求。如图1所示,OSS网关包括服务端和客户端,服务端和客户端的配置如下:In the third aspect, the present invention also provides a distributed data storage and access system based on object storage, which can be referred to as an OSS gateway for short, and can manage object storage scattered in various regions in a unified manner, satisfying the need for nearby data storage and unified management in each region requirements. As shown in Figure 1, the OSS gateway includes a server and a client, and the configuration of the server and client is as follows:
服务端部署以及配置方法:Server deployment and configuration methods:
a.在总部部署OSS网关服务端程序。a. Deploy the OSS gateway server program at the headquarters.
b.在服务端配置总部及各分支机构信息,简称站点,总部为总站点,各分支机构为分站点。b. Configure the information of the headquarters and each branch on the server side, referred to as the site, the headquarters is the main site, and each branch is the sub-site.
c.将各分支机构的对象存储以及租户信息、分支机构用户的用户名和密码等信息配置到此分支机构对应的站点下。c. Configure the object storage, tenant information, user names and passwords of branch users and other information of each branch to the site corresponding to the branch.
服务端维护一站点信息表,基于该站点信息表对用户登录信息进行认证;接收存储位置请求,根据站点信息表确定对应的对象存储,生成第一反馈指令,该第一反馈指令带有签名及有效期;在收到存储成功信息时,生成并保存数据记录,数据记录包括数据ID、所属用户和存储位置;接收记录查询指令,该记录查询指令包括管理员登录信息,判断管理员登录信息是否认证通过,若是,则反馈所有数据记录。The server maintains a site information table, and authenticates user login information based on the site information table; receives the storage location request, determines the corresponding object storage according to the site information table, and generates a first feedback command with a signature and Validity period; when receiving the successful storage information, generate and save the data record, the data record includes the data ID, the user and the storage location; receive the record query command, the record query command includes the administrator login information, and judge whether the administrator login information is authenticated Passed, if yes, all data records are fed back.
客户端配置方法:Client configuration method:
a.在需要存储和访问数据的地方部署OSS网关。a. Deploy OSS gateways where data needs to be stored and accessed.
b.在客户端上配置OSS网关服务端地址。b. Configure the OSS gateway server address on the client.
客户端通过用户登录信息和服务端地址建立与服务端的连接,需要进行数据存储时,发送存储位置请求,在接收到第一反馈指令后,根据第一反馈指令进行数据存储,其中,第一反馈指令为根据站点信息表确定的对应的对象存储生成,该第一反馈指令带有签名及有效期;需要进行数据访问时,发送查询指令,若接收到与查询指令匹配的数据记录,则发送访问指令,该访问指令包含数据ID和用户登录信息,在接收到第二反馈指令后,根据第二反馈指令进行数据访问,第二反馈指令基于查询获得的对应的存储地址生成,该第二反馈指令带有签名及有效期。The client establishes a connection with the server through the user login information and the server address. When data storage is required, the client sends a storage location request. After receiving the first feedback instruction, the client performs data storage according to the first feedback instruction, wherein the first feedback The instruction is generated according to the corresponding object storage determined by the site information table, and the first feedback instruction has a signature and a validity period; when data access is required, a query instruction is sent, and if a data record matching the query instruction is received, an access instruction is sent , the access instruction includes data ID and user login information, after receiving the second feedback instruction, data access is performed according to the second feedback instruction, the second feedback instruction is generated based on the corresponding storage address obtained from the query, and the second feedback instruction carries With signature and expiry date.
通过上述服务端和客户端的交互可以方便、高效地实现就近存储、就近访问和统一管理。Through the above interaction between the server and the client, nearby storage, nearby access and unified management can be realized conveniently and efficiently.
如图1和图2所示,实现就近存储、就近访问和统一管理的具体过程描述如下。As shown in Figure 1 and Figure 2, the specific process of realizing nearby storage, nearby access and unified management is described as follows.
1.就近存储:1. Nearby storage:
S1.用户使用用户名和密码,通过OSS网关客户端或者API登录OSS网关服务端。S1. The user uses the user name and password to log in to the OSS gateway server through the OSS gateway client or API.
S2.用户需要存储数据时,向OSS网关服务端请求合适的存储位置。S2. When the user needs to store data, the user requests a suitable storage location from the OSS gateway server.
S3.OSS网关服务端收到请求,根据配置中的用户与站点的关系,选择用户所在站点的对象存储,生成带签名以及有效期的URL,返回给OSS网关客户端或者API调用者。S3. The OSS gateway server receives the request, and according to the relationship between the user and the site in the configuration, selects the object storage of the site where the user is located, generates a URL with signature and validity period, and returns it to the OSS gateway client or API caller.
S4.OSS网关客户端或者API调用者直接使用OSS网关服务端返回的URL存储数据。S4. The OSS gateway client or API caller directly uses the URL returned by the OSS gateway server to store data.
S5.数据存储成功后,通知OSS网关服务端,服务端将数据ID以及所属用户、存储位置等信息记录到数据库中。S5. After the data is successfully stored, the OSS gateway server is notified, and the server records the data ID, the user to which it belongs, the storage location and other information into the database.
2.就近访问:2. Nearby visit:
V1.用户使用用户名和密码,通过OSS网关客户端或者API登录OSS网关服务端。V1. The user uses the user name and password to log in to the OSS gateway server through the OSS gateway client or API.
V2.通过OSS网关客户端或者API向OSS网关服务端查询用户存储的数据信息,OSS网关服务端查询此用户存储在数据库中个数据记录,返回给客户端或者API调用者。V2. Query the data information stored by the user to the OSS gateway server through the OSS gateway client or API, and the OSS gateway server queries the user's data records stored in the database and returns them to the client or API caller.
V3.用户需要访问数据时,通过服务端返回的数据记录中的数据ID向OSS网关服务端请求此数据ID的存储位置。V3. When the user needs to access data, the user requests the storage location of the data ID from the OSS gateway server through the data ID in the data record returned by the server.
V4.服务端收到请求,根据数据ID以及用户信息,从数据库查询对应的存储地址,生成带签名以及有效期的URL,返回给OSS网关客户端或者API调用者。V4. After receiving the request, the server queries the corresponding storage address from the database according to the data ID and user information, generates a URL with signature and validity period, and returns it to the OSS gateway client or API caller.
V5.OSS网关客户端或者API调用者直接使用OSS网关服务端返回的URL访问数据。V5. The OSS gateway client or API caller directly uses the URL returned by the OSS gateway server to access data.
3.统一管理:3. Unified management:
T1.根据S5,所有保存在此系统中的数据都记录在总站点OSS网关服务端的数据库中。T1. According to S5, all data stored in this system are recorded in the database of the OSS gateway server of the main site.
T2.系统管理员可根据数据库中的信息查询所有数据,实现数据的统一管理。T2. The system administrator can query all data according to the information in the database to realize the unified management of data.
在其他实施方式中,客户端可替换为API模块,用户可利用OSS网关客户端或者API来存储和访问数据。In other embodiments, the client can be replaced by an API module, and users can use the OSS gateway client or API to store and access data.
实施例1Example 1
本实施例将上述方法应用于以下场景:大型企业X,总部在城市A,分公司1在城市B,分公司2在城市C。企业X需要做数字化转型,总部和分公司都有大量的数据需要统一管理,但是基于成本考虑,总部和分公司的公网带宽都只能满足正常的办公需求,各分公司如果通过网络将数据传输到总部存储以及从总部下载数据,会占用大量的公网带宽,严重影响正常办公。In this embodiment, the above method is applied to the following scenario: a large enterprise X has its headquarters in city A, branch 1 in city B, and branch 2 in city C. Enterprise X needs to undergo digital transformation. The headquarters and branch offices have a large amount of data that needs to be managed in a unified manner. However, based on cost considerations, the public network bandwidth of the headquarters and branch offices can only meet normal office needs. Transferring data to the headquarters for storage and downloading data from the headquarters will occupy a large amount of public network bandwidth, seriously affecting normal office work.
在此场景下,总部和分公司规划将数据保存在各自办公区域的机房中,通过本发明的方案,实现高效的分布式存储,并满足统一管理的要求,具体流程如下:In this scenario, the headquarters and branch companies plan to save data in the computer rooms of their respective office areas. Through the solution of the present invention, efficient distributed storage is realized and unified management requirements are met. The specific process is as follows:
A.总部、分公司1、分公司2分别部署对象存储。A. The headquarters, branch 1, and branch 2 deploy object storage respectively.
B.在总部部署OSS网关服务端。B. Deploy the OSS gateway server at the headquarters.
C.在OSS网关服务端中配置总部、分公司1、分公司2共3个站点。C. Configure 3 sites including headquarters, branch 1, and branch 2 in the OSS gateway server.
D.将总部的对象存储信息、总部员工的用户名和密码等信息配置到总部站点中。D. Configure information such as the object storage information of the headquarters, the user names and passwords of employees in the headquarters to the headquarters site.
E.将分公司1的对象存储信息、分公司1员工的用户名和密码等信息配置到分公司1站点中。E. Configure information such as the object storage information of branch 1, the user name and password of branch 1 employees to the branch 1 site.
F.将分公司2的对象存储信息、分公司2员工的用户名和密码等信息配置到分公司2站点中。F. Configure information such as the object storage information of branch 2, the user name and password of branch 2 employees to the branch 2 site.
G.员工在办公设备上部署OSS网关客户端并配置OSS网关服务端地址,员工使用用户名和密码,通过OSS网关客户端将数据存储到员工对应站点的对象存储中,OSS网关服务端记录此数据信息。G. The employee deploys the OSS gateway client on the office equipment and configures the address of the OSS gateway server. The employee uses the user name and password to store the data in the object storage of the corresponding site of the employee through the OSS gateway client, and the OSS gateway server records this data. information.
H.企业领导以管理员身份登录OSS网关服务端,可查看所有员工保存的数据。H. The enterprise leader logs in to the OSS gateway server as an administrator to view the data saved by all employees.
实施例2Example 2
本实施例将上述方法应用于以下场景:大型机构Z,总部在城市A,分支机构1在城市B,分支机构2在城市C。机构Z需要做数字化转型,总部和分支机构有一套办公系统,办公系统会产生大量的数据需要统一管理,但是基于成本考虑,总部和分支机构的公网带宽都只能满足正常的办公需求,各分支机构的办公系统如果通过网络将数据传输到总部存储以及从总部下载数据,会占用大量的公网带宽,严重影响正常办公。In this embodiment, the above method is applied to the following scenario: large organization Z, headquartered in city A, branch 1 in city B, and branch 2 in city C. Organization Z needs to undergo digital transformation. The headquarters and branch offices have a set of office systems. The office system will generate a large amount of data that needs to be managed in a unified manner. However, based on cost considerations, the public network bandwidth of the headquarters and branch offices can only meet normal office needs. If the office system of the branch office transmits data to the headquarters for storage and downloads data from the headquarters through the network, it will occupy a large amount of public network bandwidth and seriously affect normal office work.
在此场景下,总部和分支机构规划将数据保存在各自办公区域的机房中,通过本发明的方案,实现高效的分布式存储,并满足统一管理的要求:In this scenario, the headquarters and branches plan to save data in the computer rooms of their respective office areas. Through the solution of the present invention, efficient distributed storage can be realized and the requirements of unified management can be met:
I.总部、分公司1、分公司2分别部署对象存储。I. The headquarters, branch 1, and branch 2 deploy object storage respectively.
J.在总部部署OSS网关服务端。J. Deploy the OSS gateway server at the headquarters.
K.在OSS网关服务端中配置总部、分公司1、分公司2共3个站点。K. Configure 3 sites including headquarters, branch 1, and branch 2 in the OSS gateway server.
L.将总部的对象存储信息、总部办公系统的用户名和密码等信息配置到总部站点中。L. Configure information such as the object storage information of the headquarters, the user name and password of the office system of the headquarters to the headquarters site.
M.将分公司1的对象存储信息、分公司1办公系统的用户名和密码等信息配置到分公司1站点中。M. Configure information such as the object storage information of branch 1, the user name and password of the office system of branch 1 to the site of branch 1.
N.将分公司2的对象存储信息、分公司2办公系统的用户名和密码等信息配置到分公司2站点中。N. Configure information such as the object storage information of branch 2, the user name and password of the office system of branch 2 to the site of branch 2.
O.在办公系统上进行二次开发,配置OSS网关服务端地址,办公系统使用用户名和密码,通过OSS网关API登录OSS网关服务端。将数据存储到办公系统对应站点的对象存储中,OSS网关服务端记录此数据信息。O. Perform secondary development on the office system, configure the address of the OSS gateway server, use the user name and password of the office system, and log in to the OSS gateway server through the OSS gateway API. Store the data in the object storage of the corresponding site of the office system, and the OSS gateway server records the data information.
P.机构领导以管理员身份登录OSS网关服务端,可查看所有办公系统保存的数据。P. Organization leaders can log in to the OSS gateway server as an administrator to view the data saved in all office systems.
以上详细描述了本发明的较佳具体实施例。应当理解,本领域的普通技术人员无需创造性劳动就可以根据本发明的构思作出诸多修改和变化。因此,凡本技术领域中技术人员依本发明的构思在现有技术的基础上通过逻辑分析、推理或者有限的实验可以得到的技术方案,皆应在由权利要求书所确定的保护范围内。The preferred specific embodiments of the present invention have been described in detail above. It should be understood that those skilled in the art can make many modifications and changes according to the concept of the present invention without creative effort. Therefore, all technical solutions that can be obtained by those skilled in the art based on the concept of the present invention through logical analysis, reasoning or limited experiments on the basis of the prior art shall be within the scope of protection defined by the claims.
Claims (10)
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202211192223.3A CN115580409A (en) | 2022-09-28 | 2022-09-28 | Distributed data storage access method and system based on object storage |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202211192223.3A CN115580409A (en) | 2022-09-28 | 2022-09-28 | Distributed data storage access method and system based on object storage |
Publications (1)
Publication Number | Publication Date |
---|---|
CN115580409A true CN115580409A (en) | 2023-01-06 |
Family
ID=84582577
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202211192223.3A Pending CN115580409A (en) | 2022-09-28 | 2022-09-28 | Distributed data storage access method and system based on object storage |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN115580409A (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN116094898A (en) * | 2023-01-09 | 2023-05-09 | 上海爱数信息技术股份有限公司 | Efficient content processing control method and gateway based on object storage |
CN116112237A (en) * | 2023-01-09 | 2023-05-12 | 上海爱数信息技术股份有限公司 | A cache acceleration method, gateway and storage medium based on object storage |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108200110A (en) * | 2016-12-08 | 2018-06-22 | 杭州海康威视系统技术有限公司 | A kind of data processing method, apparatus and system |
US20210336788A1 (en) * | 2020-04-24 | 2021-10-28 | Netapp, Inc. | Management services api gateway |
WO2022105048A1 (en) * | 2020-11-20 | 2022-05-27 | 网宿科技股份有限公司 | Distributed shared file system and data processing method thereof |
-
2022
- 2022-09-28 CN CN202211192223.3A patent/CN115580409A/en active Pending
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108200110A (en) * | 2016-12-08 | 2018-06-22 | 杭州海康威视系统技术有限公司 | A kind of data processing method, apparatus and system |
US20210336788A1 (en) * | 2020-04-24 | 2021-10-28 | Netapp, Inc. | Management services api gateway |
WO2022105048A1 (en) * | 2020-11-20 | 2022-05-27 | 网宿科技股份有限公司 | Distributed shared file system and data processing method thereof |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN116094898A (en) * | 2023-01-09 | 2023-05-09 | 上海爱数信息技术股份有限公司 | Efficient content processing control method and gateway based on object storage |
CN116112237A (en) * | 2023-01-09 | 2023-05-12 | 上海爱数信息技术股份有限公司 | A cache acceleration method, gateway and storage medium based on object storage |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP2156308B1 (en) | Extensible and programmable multi-tenant service architecture | |
US10079837B2 (en) | Distributed topology enabler for identity manager | |
US20050108394A1 (en) | Grid-based computing to search a network | |
CN105450636A (en) | Cloud computing management system and management method of cloud computing management system | |
CN112583887B (en) | A method for trusted data sharing based on blockchain | |
CN110032886A (en) | The method and apparatus of access authorization for resource management | |
TW200417190A (en) | System and method for high performance shared web hosting | |
CN115580409A (en) | Distributed data storage access method and system based on object storage | |
JP7706011B2 (en) | Data sharing method, network side device, system, electronic device and storage medium | |
CN112149079A (en) | Planning review management platform and user access authorization method based on microservice architecture | |
CN110636057B (en) | Application access method and device and computer readable storage medium | |
CN101706925A (en) | On-line life information service platform system | |
CN111586119B (en) | Integrated cloud storage system and storage method thereof | |
CN110661780A (en) | Wireless city data sharing method and system based on SAAS application | |
CN114866416A (en) | Multi-cluster unified management system and deployment method | |
US20050160276A1 (en) | System and method for a directory secured user account | |
CN113421052A (en) | Data sharing management method, system and computer readable storage medium | |
CN107609128A (en) | A kind of enterprise management system based on LIST SERVER | |
CN107395416A (en) | A kind of data transmission method for uplink and server cluster | |
CN114745757A (en) | A cluster switching method, device, equipment and medium | |
CN111831743A (en) | Blockchain data storage system and method based on cloud storage | |
CN111008888A (en) | Electricity selling platform management system based on master control service | |
CN116074100B (en) | A method for replacing AD domain to provide unified authentication based on ldap protocol | |
CN206259969U (en) | Small micro- business administration integral system equipment under big data environment | |
EP2034695A1 (en) | Multisite embodiment and operation |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination |