CN107295002A - The method and server of a kind of high in the clouds data storage - Google Patents

The method and server of a kind of high in the clouds data storage Download PDF

Info

Publication number
CN107295002A
CN107295002A CN201710567313.9A CN201710567313A CN107295002A CN 107295002 A CN107295002 A CN 107295002A CN 201710567313 A CN201710567313 A CN 201710567313A CN 107295002 A CN107295002 A CN 107295002A
Authority
CN
China
Prior art keywords
file
print
server
client
digital finger
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201710567313.9A
Other languages
Chinese (zh)
Other versions
CN107295002B (en
Inventor
李艳东
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Union Mobile Pay Co Ltd
Original Assignee
Union Mobile Pay Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Union Mobile Pay Co Ltd filed Critical Union Mobile Pay Co Ltd
Priority to CN201710567313.9A priority Critical patent/CN107295002B/en
Publication of CN107295002A publication Critical patent/CN107295002A/en
Application granted granted Critical
Publication of CN107295002B publication Critical patent/CN107295002B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/06—Protocols specially adapted for file transfer, e.g. file transfer protocol [FTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
  • Information Transfer Between Computers (AREA)
  • Storage Device Security (AREA)

Abstract

The embodiment of the invention discloses a kind of method of high in the clouds data storage, the file upload request that client is sent is received including first server, according to the first digital finger-print therein, calculate the second digital finger-print of the first file, and block chain database is inquired about according to second digital finger-print, if it is determined that the second digital finger-print of first file that is stored with block chain database, then directly record ownership of the user to the first file, and indicate that client no longer uploads the first file.Due to the second digital finger-print of file that can be stored with multiple servers in block chain database, thus, by inquiring about block chain database, it can determine that first file that whether is stored with multiple servers, if there being first file, then uploaded again without user, so that the file of repetition will not be stored in multiple servers, it effectively prevent and use prior art that the data stored in cloud storage are carried out with the problem of amount of calculation is very big during duplicate removal processing, while saving the uploading bandwidth and uplink time of user.

Description

The method and server of a kind of high in the clouds data storage
Technical field
The present invention relates to method and the service of computer cloud storage technical field, more particularly to a kind of high in the clouds data storage Device.
Background technology
At present, all kinds of cloud storage products of in the market are more and more, and many scientific ＆ technical corporation are all proposed the cloud storage of itself Product, increasing user and enterprise also tend to store data in cloud storage.With number of users and cloud storage On data volume continuous growth, data storage and the expense of management are also increasing in cloud storage.Due in annual abruptly increase It is to repeat to have many data in data, such as system image, film or song, thus, what cloud storage was generally stored to it Data take some duplicate removals to handle, to reduce the data volume in cloud storage, so as to save storage and the administration overhead of cloud storage.
Because each user can upload data into cloud storage, in the prior art, cloud storage generally can be when one section Between arrange once its storage data, to repeat data only retain portion, so that the data volume of storage is reduced, to save data Storage and the expense of management.But, on the one hand, this method for cloud storage, to data carry out duplicate removal before, it is necessary to deposit The file repeated is stored up, memory space is wasted, moreover, the scanning being timed and duplicate removal processing, it is also desirable to consume larger meter Calculation ability, therefore, the efficiency comparison of data deduplication are low；On the other hand, for a user, all needed when user goes up transmitting file every time Whole file is uploaded, for already present big file in cloud storage, such upload mode wastes the upload of user Bandwidth and uplink time.
In summary, a kind of method for wanting high in the clouds data storage is needed badly at present, to solve data of the prior art The less efficient of weight, amount of calculation are larger, waste the uploading bandwidth of user and the technical problem of uplink time.
The content of the invention
The present invention provides a kind of method of high in the clouds data storage, to solve the efficiency of data deduplication of the prior art compared with Low, amount of calculation is larger, wastes the uploading bandwidth of user and the technical problem of uplink time.
A kind of method of high in the clouds data storage provided in an embodiment of the present invention, methods described includes：
First server receives the file upload request for being used to upload the first file that client is sent；The file is uploaded Request is sent after the client receives the file uploading instructions of user, and the file upload request includes the visitor Family end calculates the first obtained digital finger-print according to first file；
The first server is according to first digital finger-print, and the second numeral that calculating obtains first file refers to Line, and according to the second digital finger-print of first file, inquire about block chain database；
The first server is if it is determined that the second numeral of first file that is stored with the block chain database refers to Line, then record ownership of the user to first file, and send the first configured information to the client；Described One configured information is used to indicate that the client no longer uploads first file；It is stored with the block chain database multiple Second digital finger-print of the file stored in server, the first server is any service in the multiple server Device.
Alternatively, methods described also includes：
The first server is if it is determined that the second numeral of first file that is not stored with the block chain database Fingerprint, then send the second configured information, and the second digital finger-print of first file is write into the area to the client Block chain database；Second configured information is used to indicate that the client uploads first file.
Alternatively, the encryption to first file is also included in the file upload request to indicate；
The first server determines to be stored with the block chain database the second digital finger-print of first file Afterwards, in addition to：
The first server records ownership of the user to the first encryption file, and sends the to the client One configured information；The first encryption file is that the client indicates to carry out first file according to the encryption What encryption was obtained, first configured information is used to indicate that the client no longer uploads the first encryption file.
Alternatively, methods described also includes：
The first server receives the file download request for being used to download the second file that the client is sent；It is described File download request includes the first digital finger-print of second file；
The first server calculates the second number of second file according to the first digital finger-print of second file Word fingerprint, and according to the second digital finger-print and the mark of server of the second digital finger-print of second file, and file Corresponding relation, however, it is determined that corresponding with the second digital finger-print of second file server is designated the first service The mark of device, then second file stored itself is sent to the client；If it is determined that with second file The mark for being designated second server of the corresponding server of two digital finger-prints, it indicates that the second server is by described second File is sent to the client, and the second server is another server in the multiple server.
Alternatively, the first server indicates that second file is sent to the client by the second server End, including：
The first server calculates the first digital signature to random information according to private key；
The first server is sent to the second server redirects request, and the redirection request includes described First digital signature, the random information and public key；It is described to redirect request for the second server according to described first Digital signature, the random information and the first digital signature described in public key verifications it is legal after, second file is sent to institute State client.
The method that the embodiment of the present invention also provides another high in the clouds data storage, methods described includes：
Client receives the file uploading instructions of user, and according to the file uploading instructions, determines to be uploaded the One file；
The client obtains the first digital finger-print according to first file, calculating；
The client sends file upload request according to first digital finger-print to server；The file is uploaded Request includes first digital finger-print；
The client receives the configured information that the server is sent, however, it is determined that the configured information is the first instruction letter Breath, then do not upload first file；If it is determined that the configured information is the second configured information, then first file is uploaded.
Alternatively, the encryption to first file is also included in the file uploading instructions to indicate；
The client obtains the first digital finger-print according to first file to be uploaded, calculating, including：
The client is indicated according to the encryption, calculates the digital finger-print of first file；
The client is encrypted to first file according to the digital finger-print of first file, obtains first Encrypt file；
The client calculates the digital finger-print of the first encryption file, obtains first digital finger-print.
Alternatively, methods described also includes：
The client receives the file download instructions of user, and according to the file download instructions, determines to be downloaded The second file；
The client determines institute according to file in the client and the corresponding relation of the first digital finger-print of file State the first digital finger-print of the second file；
The client is according to the first digital finger-print of second file, and sending file download to the server please Ask.
A kind of server provided based on same inventive concept, the present invention, the server is included：
Transceiver module, the file upload for being used to upload the first file that the transceiver module is used to receive client transmission please Ask；The file upload request is sent after the client receives the file uploading instructions of user, and the file is uploaded Request includes the client and the first obtained digital finger-print is calculated according to first file；
Enquiry module, the enquiry module is used for according to first digital finger-print, and calculating obtains first file Second digital finger-print, and according to the second digital finger-print of first file, inquire about block chain database；
Processing module, the processing module is used for if it is determined that first file that is stored with the block chain database Second digital finger-print, then record ownership of the user to first file, and by the transceiver module to the visitor Family end sends the first configured information；First configured information is used to indicate that the client no longer uploads first file； Be stored with the second digital finger-print of the file stored in multiple servers in the block chain database, the first server For any server in the multiple server.
Alternatively, the processing module is additionally operable to：
If it is determined that the second digital finger-print of first file that is not stored with the block chain database, then by described Transceiver module sends the second configured information to the client, and the second digital finger-print of first file is write into the area Block chain database；Second configured information is used to indicate that the client uploads first file.
Alternatively, the encryption to first file is also included in the file upload request to indicate；
The processing module is additionally operable to：
Ownership of the user to the first encryption file is recorded, and the first configured information is sent to the client；Institute State the first encryption file client according to the encryption to indicate that first file is encrypted to obtain, institute Stating the first configured information is used to indicate that the client no longer uploads the first encryption file.
Alternatively, the transceiver module is additionally operable to：
Receive the file download request for being used to download the second file that the client is sent；In the file download request Include the first digital finger-print of second file；
The processing module is additionally operable to：
According to the first digital finger-print of second file, the second digital finger-print of second file is calculated, and according to Second digital finger-print of second file, and file the second digital finger-print and server mark corresponding relation, if It is determined that the mark for being designated the first server of server corresponding with the second digital finger-print of second file, then lead to Cross second file cocurrent that the transceiver module stores itself and give the client；If it is determined that with second file The corresponding server of the second digital finger-print the mark for being designated second server, then indicated by the transceiver module described Second file is sent to the client by second server, and the second server is another in the multiple server One server.
Alternatively, the processing module is additionally operable to：
The first digital signature to random information is calculated according to private key；
The transceiver module is additionally operable to：
To the second server send redirect request, it is described redirect request include first digital signature, The random information and public key；It is described to redirect request and be used for the second server according to first digital signature, random After number and the first digital signature described in public key verifications are legal, second file is sent to the client.
A kind of client that the present invention is provided, the client includes：
Transceiver module, the transceiver module is used for the file uploading instructions for receiving user；
Processing module, the processing module is used for according to the file uploading instructions, determines the first file to be uploaded； And, according to first file, calculating obtains the first digital finger-print；
The transceiver module is additionally operable to according to first digital finger-print, and file upload request is sent to server；It is described File upload request includes first digital finger-print；And, receive the configured information that the server is sent；
The processing module is additionally operable to, however, it is determined that the configured information is the first configured information, it is determined that do not uploaded described First file；If it is determined that the configured information is the second configured information, then first file is uploaded by the transceiver module.
Alternatively, the encryption to first file is also included in the file uploading instructions to indicate；
The processing module is additionally operable to：
Indicated according to the encryption, calculate the digital finger-print of first file；
According to the digital finger-print of first file, first file is encrypted, the first encryption file is obtained；
The digital finger-print of the first encryption file is calculated, first digital finger-print is obtained.
Alternatively, the transceiver module is additionally operable to：
Receive the file download instructions of user；
The processing module is additionally operable to：
According to the file download instructions, the second file to be downloaded is determined；
According to file in the client and the corresponding relation of the first digital finger-print of file, second file is determined The first digital finger-print；
The transceiver module is additionally operable to：
According to the first digital finger-print of second file, file download request is sent to the server.It is of the invention real Apply in example, first server receives the file upload request that client is sent, the first number in the file upload request Word fingerprint, calculates the second digital finger-print of the first file, and according to second digital finger-print, block chain database is inquired about, if really Determine to be stored with block chain database the second digital finger-print of the first file, then directly record user owns to the first file Power, sends the first configured information, to indicate that client no longer uploads the first file to client.Due to the block chain database In can be stored with the second digital finger-print of the file stored in multiple servers, thus, by inquiring about the block chain database, Whether first server can determine that in multiple servers has server storage to have first file, if there being first file, Upload first file again without user, so that, it can be achieved that the file of repetition will not be stored in multiple servers, effectively kept away Exempt from the prior art to carry out the data that store that the caused amount of calculation of duplicate removal processing is very big asks in the server of cloud storage Topic, meanwhile, also save the uploading bandwidth and uplink time of user.
Brief description of the drawings
Technical scheme in order to illustrate the embodiments of the present invention more clearly, makes required in being described below to embodiment Accompanying drawing is briefly introduced, it should be apparent that, drawings in the following description are only some embodiments of the present invention, for this For the those of ordinary skill in field, without having to pay creative labor, it can also be obtained according to these accompanying drawings His accompanying drawing.
Fig. 1 is the system architecture diagram of medium cloud storage alliance of the embodiment of the present invention；
Fig. 2 is the schematic diagram of the system architecture of the first cloud storage in the embodiment of the present invention；
Fig. 3 is corresponding to the file upload procedure in a kind of method of high in the clouds data storage provided in an embodiment of the present invention Schematic flow sheet；
Fig. 4 is corresponding to the file download process in a kind of method of high in the clouds data storage provided in an embodiment of the present invention Schematic flow sheet；
Fig. 5 be the embodiment of the present invention in a kind of cloud storage server structural representation；
Fig. 6 be the embodiment of the present invention in a kind of cloud storage client structural representation.
Embodiment
In order that the object, technical solutions and advantages of the present invention are clearer, below in conjunction with accompanying drawing the present invention is made into One step it is described in detail, it is clear that described embodiment, only a part of embodiment of the invention, rather than whole implementation Example.Based on the embodiment in the present invention, what those of ordinary skill in the art were obtained under the premise of creative work is not made All other embodiment, belongs to the scope of protection of the invention.
The embodiment of the present invention is described in further detail with reference to Figure of description.
The method of high in the clouds data storage in the embodiment of the present invention, it is particularly applicable to cloud storage alliance.Fig. 1 is real for the present invention A system architecture diagram for medium cloud storage alliance is applied, as shown in figure 1, the cloud storage alliance 100 includes multiple cloud storages (such as Fig. 1 In the first cloud storage 1011, the second cloud storage 1012 ... N cloud storage 101N), the multiple cloud storage safeguard jointly one Individual block chain database 102, and in the multiple cloud storage the respective user of each cloud storage (in such as Fig. 1 1031, 1032…103N)。
Wherein, any cloud storage can provide the service of upload and the download of file to its user in the cloud storage alliance, Moreover, the cloud storage production that each cloud storage in the cloud storage alliance can be developed for same or different cloud storage manufacturer Product, any cloud storage can also provide storage trusteeship service to other cloud storages, and the present invention is not particularly limited to this.
In the embodiment of the present invention, the block chain database also known as Blockchain, any cloud in cloud storage alliance are deposited Chu Junke writes data into the block chain database, specifically, the block chain database is used to store each in cloud storage alliance Second digital finger-print of the file having in individual cloud storage, and really hold the cloud storage of each file identity, Cloud storage is to information such as the digital signature of file.
It should be noted that the second digital finger-print of the file stored in the embodiment of the present invention in block chain database, tool Body refers to that cloud storage calculates the second digital finger-print of obtained file according to the first digital finger-print of file, due to a certain file Digital finger-print has uniqueness, therefore, the digital finger-print of file and the second digital finger-print of file can as file mark Know.
Because the data that are stored in block chain database with Fast synchronization and be able to can not be distorted, therefore, block chain is used Database can not only be realized shares storage resource by each cloud storage in cloud storage alliance, saves storage and the pipe of cloud storage Expense is managed, and also ensures the security for the file that user is stored in cloud storage alliance.
Specifically, each cloud storage in cloud storage alliance is using client-server (Client-Server) System framework.By taking any cloud storage in cloud storage alliance, i.e. the first cloud storage as an example, Fig. 2 is the first cloud in the embodiment of the present invention The system architecture of storage, as shown in Fig. 2 first cloud storage is included in server 201 and client 202, the server The file that the user that is stored with uploads, in addition, user 203 can send file uploading instructions or file download instructions to client 202 Mode, into server 201 upper transmitting file or under be loaded in the file uploaded in first cloud storage.
Based on system architecture described above, it will be introduced below by taking the first cloud storage as an example in the embodiment of the present invention The method of high in the clouds data storage.Fig. 3 is that the file in a kind of method of high in the clouds data storage provided in an embodiment of the present invention is uploaded Schematic flow sheet corresponding to process, as shown in figure 3, the file upload procedure comprises the following steps S301 to step S305：
Step S301：Client receives the file uploading instructions of user, and according to the file uploading instructions, determines and treat The first file uploaded；
Step S302：The client obtains the first digital finger-print according to first file, calculating；
Step S303：The client sends file upload request according to first digital finger-print to server；It is described File upload request includes first digital finger-print；
Step S304：First server receives the file upload request for being used to upload the first file that client is sent；
Step S305：The first server is calculated and obtains the of first file according to first digital finger-print Two digital finger-prints, and according to the second digital finger-print of first file, inquire about block chain database；
Step S306：The first server if it is determined that first file that is stored with the block chain database Two digital finger-prints, then record ownership of the user to first file, and send the first instruction to the client and believe Breath；
Step S307：The server is not if it is determined that be stored with the second of first file in the block chain database Digital finger-print, then send the second configured information, and the second digital finger-print of first file is write into institute to the client State block chain database；
Step S308：The client receives the configured information that the server is sent, however, it is determined that the configured information is First configured information, then do not upload first file；If it is determined that the configured information is the second configured information, then upload described First file.
It should be noted that in above-mentioned steps S301 into step S308, client is specifically the client of the first cloud storage End, first server refers to the server of the first cloud storage, and correspondingly, user is specifically the user of first cloud storage.
Because the block chain database is safeguarded jointly by multiple cloud storages in cloud storage alliance, thus, the area Be stored with the second digital finger-print of the file stored in multiple cloud storages in block chain database, thus, by inquiring about the block Chain database, first server can determine that in cloud storage alliance first file that whether is stored with the server of cloud storage, if There is first file, then uploads first file again without user, so that, it can be achieved to store in multiple cloud storages The file repeated, effectively prevent and the data stored in the server of cloud storage are carried out caused by duplicate removal processing in the prior art Amount of calculation it is very big the problem of, meanwhile, also save the uploading bandwidth and uplink time of user.
Specifically, in step S301, client receives the file uploading instructions for being used to upload the first file of user.Than As said, in specific application scenarios, user can click on upload button in the graphical interaction interface of client, and in this earth magnetism The first file to be uploaded is selected in disk, and clicks on what is triggered after upload button.
In step S302 and step S303, the first file to be uploaded that client is selected according to user, by analysis And calculating, the first digital finger-print is obtained, and according to first digital finger-print, file upload request is sent to first server.Its In, first digital finger-print can client be worth to by calculating the file Hash of first file, or can also By CRC (Cyclical Redundancy Check, CRC), SHA256 (Secure Hash Algorithm, SHA) etc. other calculations obtain, be not particularly limited herein.
In the embodiment of the present invention, the digital finger-print of a certain file has uniqueness, is by file cryptographic Hash of digital finger-print Example, the file cryptographic Hash that different files is calculated is different, and therefore, digital finger-print can uniquely identify each text Part.
In step S304, first server receives the file upload request for being used to upload the first file that client is sent, And the first digital finger-print in this document upload request, carry out further calculating and handle, obtain the second of the first file Digital finger-print.
Specifically, the first server can obtain first text by calculating the digital finger-print of first digital finger-print Second digital finger-print of part, (such as, the second digital finger-print can be the cryptographic Hash of the digital finger-print of the first file), or, The second digital finger-print for obtaining the first file can also be calculated by other means, be not particularly limited herein.
It should be noted that because the digital finger-print of file has uniqueness, therefore, by the first digital finger-print again Digital finger-print is calculated, and the second digital finger-print of the first obtained file also has uniqueness, can be unique as the mark of file Each file in ground mark cloud storage.
In step S305, first server accesses block chain database, to detect whether deposited in the block chain database Contain the second digital finger-print of first file.Wherein, text is stored in being stored in the block chain database in multiple servers Second digital finger-print of part, in embodiments of the present invention, actual storage has all in cloud storage alliance in block chain database Second digital finger-print of the file stored in cloud storage.
In step S306, if detecting the second digital finger-print of first file that has been stored with block chain database, Be stored with first file in the server that there is a certain cloud storage in the multiple cloud storages for then illustrating cloud storage alliance, specifically , it may be possible to first server is stored with first file, it is also possible to another cloud storage (such as second beyond the first cloud storage Cloud storage) server in be stored with first file.Due to passing through block chain database realizing in the cloud storage alliance Storage resource it is shared, therefore, no matter be specifically that the server actual storage of which cloud storage has first file, need not all use Family uploads first file again, and first server need to only record ownership of the user to the first file, and be sent out to client The first configured information is sent, to indicate client without uploading first file again.
For example, if user by client to transmitting file W in first server, client is first to first service Device sends this document W the first digital finger-print, i.e. file W cryptographic Hash Hash=H (W), due to being stored in block chain database Be file secondary cryptographic Hash DoubleHash=H (H (W)), therefore, first server receiving file W first number Word fingerprint Hash=H (W), can be first according to first digital finger-print, the two of calculation document W the second digital finger-print, i.e. file W Secondary cryptographic Hash DoubleHash=H (H (W)), if calculating in obtained secondary cryptographic Hash DoubleHash and block chain database The secondary cryptographic Hash of storage is identical, then it is assumed that the identical that has been stored with cloud storage alliance file, is uploaded again without user.
In fact, some very popular files (such as film, music etc.) are probably that many users have, In the prior art, the probability that this class file is repeated in multiple cloud storages is high.Therefore, in the embodiment of the present invention, cloud storage is worked as Any cloud storage in alliance is stored with the case of a certain file, uploads complete this document again without user, only needs note The lower user of record therefore, it can effectively save the uplink time and bandwidth cost of user to the ownership of this document.
In specific application scenarios, first server can record each of its user storage in local data record The fileinfo of file.Wherein, the fileinfo of a certain file can be uploaded after this document for user into the first cloud storage, obtained Obtain and record in the data record of first server.
In the embodiment of the present invention, the data record in the server can be recorded in the way of database, such as Say, various relevant databases (such as mySQL) either non-relational database (such as NoSQL) or can also use file Record, be not particularly limited herein etc. other modes.
Specifically, the showing for the fileinfo described in the data record in first server in the embodiment of the present invention of table 1 Example, as shown in table 1, for any file, body of these fileinfos including file identification, the cloud storage for holding this document Part identifies, possessed the user list of the ownership of this document.Wherein, file identification can be for the digital finger-print of file or according to text The digital finger-print of part calculates the second digital finger-print of obtained file, during the cloud storage for possessing this document can be cloud storage alliance Any cloud storage identity, possessing the user list of the ownership of this document includes the ownership of user this document The mark of each user, the mark of the user can be specifically the ID of user, and, the user for possessing the ownership of this document can be with To be one or more.
The example of fileinfo in the server of the cloud storage of table 1 first described in data record
In this case, first server detects the second numeral of first file that is stored with block chain database and referred to Line, then record ownership of the user to first file, specifically, can this document the corresponding user of the second digital finger-print The mark of the user is added in list.
In step S307, if detecting the second digital finger-print of first file that is not stored with block chain database, Then illustrate not storing first file in multiple cloud storages in cloud storage alliance, accordingly, it would be desirable to which user uploads first text Part, i.e. first server to client send the second configured information, with indicate client upload the first file, and client into Work(is uploaded after first file, and the identity of the second digital finger-print of the first file, the first cloud storage is written into block chain In database.At the same time, first server is also by the digital finger-print of the first file of success upload or according to the first file Digital finger-print calculates obtained the second digital finger-print of the first file, the identity of first server, and the user to the First server of ownership (user is added in the user list of this document) record of one file in above-mentioned form In data record, in order to which, in first file, first server can be inquired about correspondingly under another user request.
In this case, the first cloud storage is really to hold the cloud storage of first file, and the first cloud storage is to The digital signature of one the second digital finger-print of file, be for the data to block chain database representation first cloud storage write-in True and reliable.
During file is uploaded, the first digital finger-print that user end to server is sent is typically all that the client is led to The first file that analysis user selectes is crossed, calculating (cryptographic Hash as calculated first file) is obtained, that is to say, that work as user By the way that during transmitting file, user is truly to hold the first file to be uploaded in client.But in certain extreme cases, if The digital finger-print leakage of user file, disabled user can also obtain the ownership of file in the case where not holding file.Citing For, if being stored with file A in user A cloud storage, but file A digital finger-print has been leaked on internet, is used Family B is obtained by internet pick after file A digital finger-print, and the process of digital finger-print can be calculated by software simulant-client, and The digital finger-print is sent to server.And then, server by digital finger-print calculation document A the second digital finger-print, and Inquire about block chain database.Due to this document A that has been stored with cloud storage, therefore, server is it is determined that in block chain database It is stored with after file A the second digital finger-print, ownership of the user B to file A can be directly recorded, so that user B is used Back door achieves user A file A.
Therefore, in order to strengthen the security of file stored in cloud storage, what first server can also be uploaded to user First file is encrypted.Specifically, user by client when uploading the first file, can also be specifically designated to this Whether the processing mode of one file, i.e., the first file is encrypted.
It is to be uploaded except what is selected in the file uploading instructions that the user that client is received sends in step S301 Outside first file, in addition to the encryption of the first file is indicated.
If not including the encryption in file uploading instructions to indicate, illustrate that user determines not add the first file Close processing, in this case, user's file to be uploaded be exactly the first file in itself, thus, the client can be calculated directly The digital finger-print (the file cryptographic Hash of such as the first file) of first file, and please in file upload as the first digital finger-print Server is sent in asking, then, server can carry out follow-up processing by performing above-mentioned steps S305 to step S308, Here is omitted.
If the processing is designated as encryption instruction, illustrate that user determines that the first file is encrypted, should Actual the first file for after encryption of user's file to be uploaded, thus, client is sent to service in file upload request First digital finger-print of device is to calculate obtained digital finger-print to the first file after encryption.
Exemplified by using the digital finger-print of file as the cryptographic Hash of file, the process of the digital finger-print of calculating first is specifically wrapped Include, client calculates the digital finger-print of the first file, according to the digital finger-print of the first obtained file to the first file encryption, obtains To the first encryption file, then, the first digital finger-print for encrypting file, and the number for encrypting file by obtain first are calculated again Word fingerprint indicates together, server to be sent in file upload request as the first digital finger-print with above-mentioned encryption.
Due to the identical file that user uploads, the encryption file obtained after being encrypted is also identical, so, The second digital finger-print encrypted the digital finger-print of file and further calculated according to the data fingerprint is also identical.Thus, If the second digital finger-print of the first encryption file that is stored with block chain database, illustrates multiple in cloud storage alliance The server storage of an existing cloud storage has identical first to encrypt file in cloud storage, then first server can directly be remembered Employ ownership of the family to the first encryption file；Otherwise, it is still to upload the first encryption file by client.
As can be seen that in the case where user indicates that the first file to be uploaded is encrypted client, client End is sent to the first digital finger-print of server in file upload request, is actually the digital finger-print pair according to the first file After first file is encrypted, the digital finger-print of the first obtained encryption file.That is, user only holds the real In the case of one file, the digital finger-print of the first encryption file is just can obtain, the ownership of the first file is obtained；And disabled user The digital finger-print of the first file is only being obtained, and in the case of not holding the first file, it is impossible to first after being encrypted File is encrypted, so the first digital finger-print of the first encryption file can not be obtained, so that the ownership of the first file obtained, And because the possibility that the digital finger-print of the file after user encryption is revealed is very little, thus, by to be uploaded the One file is encrypted, and can effectively ensure that the safety of the file stored in cloud storage.
In addition, in the prior art, if the file of user's upload, user are lost or have modified without authorization to cloud storage Also it can not find and prove in time, this causes the integrality that user uploads to the file of cloud storage not to be guaranteed, and is user Data rights and interests bring certain secret worry.
In the embodiment of the present invention, by block chain database realizing in cloud storage alliance each cloud storage storage resource Shared, the second digital finger-print of the file stored in each cloud storage in cloud storage alliance has been stored in block chain database In, due to block chain database itself can Fast synchronization and the characteristic that can not distort, if cloud storage has distorted user's upload File, then file in cloud storage calculate obtained this document the second digital finger-print must with block chain database Second digital finger-print of this document of storage is different, and user can check block chain database by application, obtain this document original The second digital finger-print, so that it may prove that cloud storage service business distorts the behavior of user data, so as to ensure that the complete of user data Whole property and uniformity.
Because the block chain database described in the embodiment of the present invention specifically refers to alliance's chain, i.e., only add the alliance Structure or individual, which just have permission, to be write in the block chain database or reads data, therefore, in the embodiment of the present invention, Yong Huke The block chain database is accessed by other cloud storages in cloud storage alliance, or can also be accessed by specially-enabled mechanism Block chain database, is not particularly limited herein.
It should be noted that as a kind of easy way, in the embodiment of the present invention, first server is receiving client After the first digital finger-print for holding the first file sent, the second numeral of the first digital finger-print calculation document can not also be referred to Line, correspondingly, in this case, the mark of file is the first numeral of file in the local data records of first server First digital finger-print of All Files, the direct basis of first server in each cloud storage stored in fingerprint, block chain database The first digital finger-print inquiry block chain database of file, judges the numeral of identical first that whether is stored with block chain database Fingerprint, to determine whether that cloud storage has been stored with this document,
Fig. 4 is corresponding to the file download process in a kind of method of high in the clouds data storage provided in an embodiment of the present invention Schematic flow sheet, as shown in figure 4, the file download process comprises the following steps S401 to step S406：
Step S401：The client receives the file download instructions of user, and according to the file download instructions, it is determined that Go out the second file to be downloaded；
Step S402：The client is according to the corresponding relation of the digital finger-print of file and file in the client, really Make the first digital finger-print of second file；
Step S403：The client sends text according to the first digital finger-print of second file to the server Part download request；
Step S404：The first server receives the file download for being used to download the second file that the client is sent Request, the file download request includes the first digital finger-print of second file；
Step S405：The first server calculates second file according to the digital finger-print of second file Second digital finger-print, and according to the second digital finger-print of second file, the second digital finger-print and the mark of server of file The corresponding relation of knowledge, however, it is determined that server corresponding with the second digital finger-print of second file be designated it is described first clothes The mark of business device, then second file cocurrent stored itself gives the client；
Step S406：If it is determined that corresponding with the first digital finger-print of second file server is designated the second clothes The mark of business device, it indicates that second file is sent to the client, the second server by the second server For another server in the multiple server.
It is shared due to multiple cloud storages storage resource by block chain database realizing in the embodiment of the present invention, because This, the file that user is uploaded by the first cloud storage is actually possible to be stored in the first cloud storage, it is also possible to be stored in In the second cloud storage in cloud storage alliance in addition to the first cloud storage.When user to the first cloud storage by downloading file, It can rapidly find really to hold the cloud storage of this document, and deposit by the cloud for really holding this document by block chain database Storage sends the file to client, because the process is transparent for user, using the cloud storage for really holding this document Send the file to client, it is ensured that the Consumer's Experience in file download process.
It should be noted that in above-mentioned steps S401 into step S406, the multiple server specifically refers to a cloud The server of multiple cloud storages in storage alliance, specifically, the first server refers specifically to the server of the first cloud storage, institute The server that second server specifically refers to the second cloud storage is stated, the user is the user of first cloud storage.
The client and the first server can be by performing method and steps of the above-mentioned S401 into S406 for user The service of file download is provided, moreover, only user obtains the ownership of file by transmitting file in the first cloud storage Afterwards, just this document can be downloaded by the server and client side of the first cloud storage.
Specifically, in step S401, client receives the file download instructions of user, and is referred to according to the file download Order, determines the second file to be downloaded；Wherein, second file is that user possesses all described in first cloud storage Any file of power.In specific application scenarios, the user can select to be downloaded second in the user interface of client File, and click on the mode of download button and send file download instructions to client, or can also be by other means to visitor Family end sends file download instructions, is not limited herein.
It is described to use if the user uploads file into the first cloud storage in step S402 and step S403 The data record of the client at family is stored with each file that the user uploads into the first cloud storage, and each file the first number The corresponding relation of word fingerprint.
Therefore, the client by the data record in inquiring client terminal, can obtain the first of the second file to be downloaded Digital finger-print, and according to the first digital finger-print of second file, file download request is sent to the first server.
In step s 404, first server receives the file download for being used to download the second file that the client is sent Request, the file download request includes the first digital finger-print of second file.
In step S405, first server calculates the of second file according to the first digital finger-print of the second file Two digital finger-prints, such as, digital finger-print can be calculated again to the first digital finger-print of second file, obtain second file The second digital finger-print；
And then, according to the second digital finger-print and the mark of server of the second digital finger-print of second file, and file The corresponding relation of knowledge, determines the mark of server corresponding with the digital finger-print of the second file.
If it is determined that corresponding with the second digital finger-print of second file server is designated the first server Mark, i.e. the second file is stored in the first cloud storage, then second file cocurrent that first server stores itself Give the client.
In the embodiment of the present invention, the corresponding relation of the mark of second digital finger-print and server can specifically refer to described The data record stored in server, shown in table 1 as mentioned in the above, the data record includes user in first cloud storage The fileinfo of each file passed, including file identification, hold the identity of documentary cloud storage, ownership is possessed to file User list, the second digital finger-print of file specifically refers to the mark of file in data record, and the mark of server is specifically Refer to the identity of the cloud storage of real storage this document.
Wherein, the fileinfo of a certain file is method and step of the user by above-mentioned S301 into S308, to first Obtain and record in first server during this document is uploaded in cloud storage, specifically repeat no more.
Thus, first server according to the second digital finger-print of the second file, can inquire about the data record of first server, To determine the identity for the cloud storage for storing second file.If it is determined that the cloud storage for storing second file be this One cloud storage itself, then the first cloud storage can directly provide the user download second file service, by second file send out Give client.
Conversely, in step S406, first server is if it is determined that corresponding with the second digital finger-print of second file The mark for being designated second server of server, i.e. the second file are stored in the second cloud storage, then first server is indicated Second file is sent to the client by the second server, and the second server is in the multiple server Another server, i.e. another cloud storage in cloud storage alliance in addition to the first cloud storage.
That is, first server if it is determined that hold second file cloud storage be cloud storage alliance in the second cloud storage, The service of file download is then provided by second server for the user, second file is sent to client.
Specifically include, the first cloud storage calculates the service evidence that auxiliary fetches the second file in the following way：
Evidence=sign (priv, R) formula one
Wherein, evidence fetches the service evidence of second file for auxiliary, and sign (priv, R) is digital signature letter Number, it has two parameters, is priv and R respectively, specifically, priv refers to private key (the i.e. private of signer of the first cloud storage Key), R refers to random information, i.e., message to be signed, and it is the numerical value changed every time, can be single random number or Timestamp, or, second server recognizes the second file to be downloaded for convenience, and the random information can also be the second file The combination of second digital finger-print and random number or timestamp, wherein, the second digital finger-print of the second file can with random number or Timestamp direct splicing is got up, or can also be encapsulated in using other modes in random information, is not limited herein.Therefore, The result that the digital signature function is returned is the first cloud storage first digital signature of the private key of itself to random information R.
And then, after the first cloud storage calculates first digital signature, it can send to redirect to the second cloud storage and ask Ask, i.e., the request for user being downloaded into file redirects the cloud storage for being linked to second file that is stored with.Wherein, the redirection please Asking includes calculating obtained the first digital signature (servicing evidence evidence), above-mentioned random information R, and the first cloud is deposited The public key pub of storage.
Second cloud storage receive the redirection request after, by extract the redirection request in service evidence and protect Deposit, according to the service evidence and random information R and the public key of the first cloud storage, the wherein first numeral is verified in the following way The legitimacy of signature：
F=verify (pub, R, evidence) formula two
Wherein, F is the returning result of verifying data signature function, and it can be a numerical quantities or amount of logic；Verify (pub, R, evidence) it is digital signature authentication function, the function has 3 parameters, respectively pub, R, evidence；Specifically, Pub refers to the public key (i.e. the public key of signer) of the first cloud storage, and R is identical with formula one, refers to random information, i.e. signer The message of signature, evidence is the first cloud storage to random information R digital signature, i.e. the first digital signature；If the numeral The result that signature verification function is returned is true (i.e. F value is not 0), then it is strictly the first cloud storage to prove first digital signature Signed, be verified, otherwise, if the result that digital verification checking function is returned is false (F value is 0), prove first number Word signature is not that the first cloud storage is signed, and checking does not pass through.
If the second cloud storage verifies that the first digital signature is legal, the second cloud storage is further by obtaining random information R In the second file digital finger-print, determine the second file to be downloaded, and then, download described the can be provided for the user The service of two files, client is sent to by the second file.
If in addition, the second cloud storage is according to the first digital signature, determining that the first digital signature once occurred, then illustrating First cloud storage repeatedly downloads this document, in this case, second using first digital signature to the request of the second cloud storage Cloud storage is rejected by the download request.
It should be noted that in the embodiment of the present invention, due to the file that user passes through client downloads must be user it It is preceding to be uploaded by the client to first server, therefore, if it is encryption text that user, which passes through second file of client downloads, The digital finger-print of this document stored in part, client is the key that is decrypted of the second file of download, in first service Second file is sent to after client by device or second server, and client can refer to according to the numeral of this document of its storage Second file of download is decrypted line.
It can be seen that, during the download of above-mentioned file, if the second file that user is downloaded by the first cloud storage is stored In the second cloud storage, the first cloud storage is redirected be linked to the second cloud storage during also create service evidence (i.e. the Digital signature of one cloud storage to random information R), if being concluded between the first cloud storage and the second cloud storage has other contracts, Such as storage trusteeship service etc., the second cloud storage can be assisted relying on the service evidence to perform some clearances to the first cloud storage in the future View, such as, service charge etc. is asked for, is not particularly limited herein.
In the embodiment of the present invention, by introducing block chain database and digital signature technology, reach cloud storage alliance, because And, the memory space of multiple cloud storages can be taken full advantage of so that each cloud storage in cloud storage alliance need not store institute Some files, but show the effect for holding All Files in cloud storage alliance, substantially reduce each cloud in cloud storage alliance The storage of storage and administration overhead, protect the integrality of user data, while the data realized between multiple cloud storages are total to Enjoy, users to share and income are shared.
Based on same inventive concept, the embodiment of the present invention also provides a kind of server, and the server is in cloud storage Server, the server can refer to the above method, provides the user the service of the data storage in cloud storage.Such as Fig. 5 institutes Show, the server 500 includes：
Transceiver module 501, the transceiver module 501 is used for the file for being used to upload the first file for receiving client transmission Upload request；The file upload request is sent after the client receives the file uploading instructions of user, the text Part upload request includes the client and the first obtained digital finger-print is calculated according to first file；
Enquiry module 502, the enquiry module 502 is used for according to first digital finger-print, and calculating obtains described first Second digital finger-print of file, and according to the second digital finger-print of first file, inquire about block chain database；
Processing module 503, the processing module 503 is used for if it is determined that being stored with described first in the block chain database Second digital finger-print of file, then record ownership of the user to first file, and pass through the transceiver module 501 The first configured information is sent to the client；First configured information is used to indicate that the client no longer uploads described the Be stored with the second digital finger-print of the file stored in multiple servers in one file, the block chain database, and described One server is any server in the multiple server.
Alternatively, the processing module 503 is additionally operable to：
If it is determined that the second digital finger-print of first file that is not stored with the block chain database, then by described Transceiver module 501 sends the second configured information to the client, and the second digital finger-print of first file is write into institute State block chain database；Second configured information is used to indicate that the client uploads first file.
Alternatively, the encryption to first file is also included in the file upload request to indicate；
The processing module 503 is additionally operable to：
Ownership of the user to the first encryption file is recorded, and the first configured information is sent to the client；Institute State the first encryption file client according to the encryption to indicate that first file is encrypted to obtain, institute Stating the first configured information is used to indicate that the client no longer uploads the first encryption file.
Alternatively, the transceiver module 501 is additionally operable to：
Receive the file download request for being used to download the second file that the client is sent；In the file download request Include the first digital finger-print of second file；
The processing module 503 is additionally operable to：
According to the first digital finger-print of second file, the second digital finger-print of second file is calculated, and according to Second digital finger-print of second file, and file the second digital finger-print and server mark corresponding relation, if It is determined that the mark for being designated the first server of server corresponding with the second digital finger-print of second file, then lead to Cross second file cocurrent that the transceiver module 501 stores itself and give the client；If it is determined that with described second The mark for being designated second server of the corresponding server of the second digital finger-print of file, then pass through the transceiver module 501 Indicate that second file is sent to the client by the second server, the second server is the multiple service Another server in device.
Alternatively, the processing module 503 is additionally operable to：
The first digital signature to random information is calculated according to private key；
The transceiver module 501 is additionally operable to：
To the second server send redirect request, it is described redirect request include first digital signature, The random information and public key；It is described to redirect request and be used for the second server according to first digital signature, described After the first digital signature is legal described in random information and public key verifications, second file is sent to the client.
Based on same inventive concept, the embodiment of the present invention also provides a kind of client, and the client is specially that cloud is deposited The client of storage, the client can refer to the above method, provide the user into cloud storage transmitting file or from cloud storage The middle service for downloading file.As shown in fig. 6, the client 600 includes：
Transceiver module 601, the transceiver module 601 is used for the file uploading instructions for receiving user；
Processing module 602, the processing module 602 is used for according to the file uploading instructions, determines to be uploaded the One file；And, according to first file, calculating obtains the first digital finger-print；
The transceiver module 601 is additionally operable to according to first digital finger-print, and file upload request is sent to server；Institute Stating file upload request includes first digital finger-print；And, receive the configured information that the server is sent；
The processing module 602 is additionally operable to, however, it is determined that the configured information is the first configured information, it is determined that do not upload institute State the first file；If it is determined that the configured information is the second configured information, then described first is uploaded by the transceiver module 601 File.
Alternatively, the encryption to first file is also included in the file uploading instructions to indicate；
The processing module 602 is additionally operable to：
Indicated according to the encryption, calculate the digital finger-print of first file；
According to the digital finger-print of first file, first file is encrypted, the first encryption file is obtained；
The digital finger-print of the first encryption file is calculated, first digital finger-print is obtained.
Alternatively, the processing module 602 is additionally operable to：
Receive the file download instructions of user；
The processing module 602 is additionally operable to：
According to the file download instructions, the second file to be downloaded is determined；
According to the corresponding relation of the digital finger-print of file and file in the client, the of second file is determined One digital finger-print；
The transceiver module 601 is additionally operable to：
According to the first digital finger-print of second file, file download request is sent to the server.
By the above it can be seen that：
In the embodiment of the present invention, first server receives the file upload request that client is sent, according on the file The first digital finger-print in request is passed, the second digital finger-print of the first file is calculated, and according to second digital finger-print, interrogation zone Block chain database, however, it is determined that the second digital finger-print of first file that is stored with block chain database, then directly record user couple The ownership of first file, sends the first configured information, to indicate that client no longer uploads the first file to client.By institute The second digital finger-print of the file stored in multiple servers that can be stored with block chain database is stated, thus, pass through inquiry The block chain database, whether first server can determine that in multiple servers has server storage to have first file, if depositing There is first file, then upload first file again without user, so that, it can be achieved that weight will not be stored in multiple servers Multiple file, effectively prevent and the data stored in the server of cloud storage are carried out caused by duplicate removal processing in the prior art The problem of amount of calculation is very big, meanwhile, also save the uploading bandwidth and uplink time of user.
It should be understood by those skilled in the art that, embodiments of the invention can be provided as method, system or computer program Product.Therefore, the present invention can be using the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware Apply the form of example.Moreover, the present invention can be used wherein includes the meter of computer usable program code at one or more The computer journey that calculation machine usable storage medium is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.) The form of sequence product.
The present invention is the flow with reference to method according to embodiments of the present invention, equipment (system) and computer program product Figure and/or block diagram are described.It should be understood that can be by every first-class in computer program instructions implementation process figure and/or block diagram Journey and/or the flow in square frame and flow chart and/or block diagram and/or the combination of square frame.These computer programs can be provided The processor of all-purpose computer, special-purpose computer, Embedded Processor or other programmable data processing devices is instructed to produce A raw machine so that produced by the instruction of computer or the computing device of other programmable data processing devices for real The function of being specified in present one flow of flow chart or one square frame of two or more flow and/or block diagram or two or more square frame Device.
These computer program instructions, which may be alternatively stored in, can guide computer or other programmable data processing devices with spy Determine in the computer-readable memory that mode works so that the instruction being stored in the computer-readable memory, which is produced, to be included referring to The manufacture of device is made, the command device is realized in one flow of flow chart or two or more flow and/or one side of block diagram The function of being specified in frame or two or more square frame.
These computer program instructions can be also loaded into computer or other programmable data processing devices so that in meter Series of operation steps is performed on calculation machine or other programmable devices to produce computer implemented processing, thus in computer or The instruction performed on other programmable devices is provided for realizing in one flow of flow chart or two or more flow and/or square frame The step of function of being specified in one square frame of figure or two or more square frame.
, but those skilled in the art once know basic creation although preferred embodiments of the present invention have been described Property concept, then can make other change and modification to these embodiments.So, appended claims are intended to be construed to include excellent Select embodiment and fall into having altered and changing for the scope of the invention.
Obviously, those skilled in the art can carry out the essence of various changes and modification without departing from the present invention to the present invention God and scope.So, if these modifications and variations of the present invention belong to the scope of the claims in the present invention and its equivalent technologies Within, then the present invention is also intended to comprising including these changes and modification.

Claims (16)

1. a kind of method of high in the clouds data storage, it is characterised in that methods described includes：
First server receives the file upload request for being used to upload the first file that client is sent；The file upload request It is to be sent after the client receives the file uploading instructions of user, the file upload request includes the client The first obtained digital finger-print is calculated according to first file；
The first server calculates the second digital finger-print for obtaining first file according to first digital finger-print, and According to the second digital finger-print of first file, block chain database is inquired about；
The first server is if it is determined that the second digital finger-print of first file that is stored with the block chain database, then Ownership of the user to first file is recorded, and the first configured information is sent to the client；Described first refers to Show that information is used to indicate that the client no longer uploads first file；Be stored with multiple services in the block chain database Second digital finger-print of the file stored in device, the first server is any server in the multiple server.
2. the method as described in claim 1, it is characterised in that methods described also includes：
The first server if it is determined that the second digital finger-print of first file that is not stored with the block chain database, The second configured information then is sent to the client, and the second digital finger-print of first file is write into the block chain number According to storehouse；Second configured information is used to indicate that the client uploads first file.
3. the method as described in claim 1, it is characterised in that also include in the file upload request to first file Encryption indicate；
The first server determines to be stored with the block chain database after the second digital finger-print of first file, Also include：
The first server records ownership of the user to the first encryption file, and sends the first finger to the client Show information；The first encryption file is that the client indicates that first file is encrypted according to the encryption Obtain, first configured information is used to indicate that the client no longer uploads the first encryption file.
4. the method as described in claim 1, it is characterised in that methods described also includes：
The first server receives the file download request for being used to download the second file that the client is sent；The file Download request includes the first digital finger-print of second file；
The first server is according to the first digital finger-print of second file, and the second numeral for calculating second file refers to Line, and according to the second digital finger-print of second file, and file the second digital finger-print and server mark pair It should be related to, however, it is determined that corresponding with the second digital finger-print of second file server is designated the first server Mark, then second file stored itself is sent to the client；If it is determined that the second number with second file The mark for being designated second server of the corresponding server of word fingerprint, it indicates that the second server is by second file The client is sent to, the second server is another server in the multiple server.
5. method as claimed in claim 4, it is characterised in that the first server indicates that the second server will be described Second file is sent to the client, including：
The first server calculates the first digital signature to random information according to private key；
The first server is sent to the second server redirects request, and described redirect asks to include described first Digital signature, the random information and public key；It is described to redirect request for the second server according to the described first numeral After first digital signature described in signature, the random information and public key verifications is legal, second file is sent to the visitor Family end.
6. a kind of method of high in the clouds data storage, it is characterised in that methods described includes：
Client receives the file uploading instructions of user, and according to the file uploading instructions, determines the first text to be uploaded Part；
The client obtains the first digital finger-print according to first file, calculating；
The client sends file upload request according to first digital finger-print to server；The file upload request Include first digital finger-print；
The client receives the configured information that the server is sent, however, it is determined that the configured information is the first configured information, First file is not uploaded then；If it is determined that the configured information is the second configured information, then first file is uploaded.
7. method as claimed in claim 6, it is characterised in that also include in the file uploading instructions to first file Encryption indicate；
The client obtains the first digital finger-print according to first file to be uploaded, calculating, including：
The client is indicated according to the encryption, calculates the digital finger-print of first file；
The client is encrypted to first file according to the digital finger-print of first file, obtains the first encryption File；
The client calculates the digital finger-print of the first encryption file, obtains first digital finger-print.
8. method as claimed in claim 6, it is characterised in that methods described also includes：
The client receives the file download instructions of user, and according to the file download instructions, determines to be downloaded the Two files；
The client determines described according to file in the client and the corresponding relation of the first digital finger-print of file First digital finger-print of two files；
The client sends file download request according to the first digital finger-print of second file to the server.
9. a kind of server, it is characterised in that the server includes：
Transceiver module, the transceiver module is used for the file upload request for being used to upload the first file for receiving client transmission； The file upload request is sent after the client receives the file uploading instructions of user, the file upload request Include the client and the first obtained digital finger-print is calculated according to first file；
Enquiry module, the enquiry module is used for according to first digital finger-print, and calculating obtains the second of first file Digital finger-print, and according to the second digital finger-print of first file, inquire about block chain database；
Processing module, the processing module is used for if it is determined that being stored with the second of first file in the block chain database Digital finger-print, then record ownership of the user to first file, and by the transceiver module to the client Send the first configured information；First configured information is used to indicate that the client no longer uploads first file；It is described Be stored with the second digital finger-print of the file stored in multiple servers in block chain database, and the first server is institute State any server in multiple servers.
10. server as claimed in claim 9, it is characterised in that the processing module is additionally operable to：
If it is determined that the second digital finger-print of first file that is not stored with the block chain database, then pass through the transmitting-receiving Module sends the second configured information to the client, and the second digital finger-print of first file is write into the block chain Database；Second configured information is used to indicate that the client uploads first file.
11. server as claimed in claim 9, it is characterised in that also include in the file upload request to described first The encryption of file is indicated；
The processing module is additionally operable to：
Ownership of the user to the first encryption file is recorded, and the first configured information is sent to the client；Described The one encryption file client is encrypted to first file and obtained according to encryption instruction, and described the One configured information is used to indicate that the client no longer uploads the first encryption file.
12. server as claimed in claim 9, it is characterised in that the transceiver module is additionally operable to：
Receive the file download request for being used to download the second file that the client is sent；The file download request includes First digital finger-print of second file；
The processing module is additionally operable to：
According to the first digital finger-print of second file, second the second numeral of digital finger-print for calculating second file refers to Line, and according to the second digital finger-print of second file, and file the second digital finger-print and server mark pair It should be related to, however, it is determined that corresponding with the second digital finger-print of second file server is designated the first server Mark, then second file cocurrent stored itself by the transceiver module gives the client；If it is determined that with institute The mark for being designated second server of the corresponding server of the second digital finger-print of the second file is stated, then passes through the transmitting-receiving mould Block indicates that second file is sent to the client by the second server, and the second server is the multiple clothes Another server being engaged in device.
13. server as claimed in claim 12, it is characterised in that the processing module is additionally operable to：
The first digital signature to random information is calculated according to private key；
The transceiver module is additionally operable to：
To the second server send redirect request, it is described redirect request include first digital signature, it is described Random information and public key；It is described redirect request be used for the second server according to first digital signature, random number and After the first digital signature is legal described in public key verifications, second file is sent to the client.
14. a kind of client, it is characterised in that the client includes：
Transceiver module, the transceiver module is used for the file uploading instructions for receiving user；
Processing module, the processing module is used for according to the file uploading instructions, determines the first file to be uploaded；With And, according to first file, calculating obtains the first digital finger-print；
The transceiver module is additionally operable to according to first digital finger-print, and file upload request is sent to server；The file Upload request includes first digital finger-print；And, receive the configured information that the server is sent；
The processing module is additionally operable to, however, it is determined that the configured information is the first configured information, it is determined that do not upload described first File；If it is determined that the configured information is the second configured information, then first file is uploaded by the transceiver module.
15. client as claimed in claim 14, it is characterised in that also include in the file uploading instructions to described first The encryption of file is indicated；
The processing module is additionally operable to：
Indicated according to the encryption, calculate the digital finger-print of first file；
According to the digital finger-print of first file, first file is encrypted, the first encryption file is obtained；
The digital finger-print of the first encryption file is calculated, first digital finger-print is obtained.
16. client as claimed in claim 15, it is characterised in that the transceiver module is additionally operable to：
Receive the file download instructions of user；
The processing module is additionally operable to：
According to the file download instructions, the second file to be downloaded is determined；
According to file in the client and the corresponding relation of the first digital finger-print of file, the of second file is determined One digital finger-print；
The transceiver module is additionally operable to：
According to the first digital finger-print of second file, file download request is sent to the server.
CN201710567313.9A 2017-07-12 2017-07-12 Cloud data storage method and server Active CN107295002B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201710567313.9A CN107295002B (en) 2017-07-12 2017-07-12 Cloud data storage method and server

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201710567313.9A CN107295002B (en) 2017-07-12 2017-07-12 Cloud data storage method and server

Publications (2)

Publication Number Publication Date
CN107295002A true CN107295002A (en) 2017-10-24
CN107295002B CN107295002B (en) 2020-06-19

Family

ID=60100731

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201710567313.9A Active CN107295002B (en) 2017-07-12 2017-07-12 Cloud data storage method and server

Country Status (1)

Country Link
CN (1) CN107295002B (en)

Cited By (31)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108256327A (en) * 2017-12-22 2018-07-06 新华三信息安全技术有限公司 A kind of file test method and device
CN108280628A (en) * 2018-02-01 2018-07-13 泰康保险集团股份有限公司 Core based on block chain technology pays for method, apparatus, medium and electronic equipment
CN108664623A (en) * 2018-05-14 2018-10-16 中钞***产业发展有限公司杭州区块链技术研究院 A kind of date storage method, device, equipment and medium
CN108765683A (en) * 2018-05-23 2018-11-06 栾友祥 A kind of ballot system based on block chain technology
CN108809932A (en) * 2018-04-09 2018-11-13 杭州拾贝知识产权服务有限公司 A kind of deposit system, method and readable medium based on block chain
CN108833460A (en) * 2018-04-10 2018-11-16 平安科技（深圳）有限公司 Music distribution method, apparatus and terminal device based on block chain
CN108920966A (en) * 2018-06-25 2018-11-30 北京奇虎科技有限公司 A kind of block chain deposits card, evidence collecting method and device
CN108932297A (en) * 2018-06-01 2018-12-04 阿里巴巴集团控股有限公司 A kind of data query, data sharing method, device and equipment
CN109088720A (en) * 2018-08-14 2018-12-25 广东工业大学 A kind of encryption file De-weight method and device based on mixing cloud storage
CN109214933A (en) * 2018-08-22 2019-01-15 泰康保险集团股份有限公司 Approaches to IM, device, medium and electronic equipment based on block chain
CN109241754A (en) * 2018-08-14 2019-01-18 广东工业大学 A kind of cloud file data de-duplication method based on block chain
CN109302491A (en) * 2018-11-13 2019-02-01 爱普（福建）科技有限公司 A kind of industry internet framework and its operation method based on block chain
CN109409122A (en) * 2018-09-13 2019-03-01 远光软件股份有限公司 File memory method and its electronic equipment, storage medium
CN109768987A (en) * 2019-02-26 2019-05-17 重庆邮电大学 A kind of storage of data file security privacy and sharing method based on block chain
WO2019114097A1 (en) * 2017-12-15 2019-06-20 成都链一网络科技有限公司 Blockchain-based distributed storage method
CN110019347A (en) * 2018-01-02 2019-07-16 ***通信有限公司研究院 A kind of data processing method, device and the terminal device of block chain
CN110099108A (en) * 2019-04-26 2019-08-06 深圳前海微众银行股份有限公司 A kind of block chain event De-weight method, device, computer equipment and storage medium
CN110109883A (en) * 2018-01-25 2019-08-09 卓望数码技术（深圳）有限公司 A kind of file filters weight storage method and device
CN110719163A (en) * 2019-09-29 2020-01-21 联想(北京)有限公司 Information processing method, device and storage medium
CN110768979A (en) * 2019-10-22 2020-02-07 王慧君 Formica algorithm-based block chain big data processing method and system
CN111078649A (en) * 2019-12-12 2020-04-28 中国建设银行股份有限公司 Block chain-based on-cloud file storage method and device and electronic equipment
CN111324902A (en) * 2018-12-14 2020-06-23 航天信息股份有限公司 Data access method, device and system based on block chain
CN111832069A (en) * 2020-06-05 2020-10-27 广东科学技术职业学院 Multi-block chain on-chain data storage system and method based on cloud computing
CN111831743A (en) * 2020-06-05 2020-10-27 广东科学技术职业学院 Block chain data storage system and method based on cloud storage
CN112700800A (en) * 2021-02-18 2021-04-23 深圳星算科技有限公司 Distributed storage device of block chain
CN112926091A (en) * 2021-03-26 2021-06-08 支付宝(杭州)信息技术有限公司 Block chain-based data ownership recording and data transaction verification method and device
CN113453191A (en) * 2020-03-27 2021-09-28 本田技研工业株式会社 Communication system and control method of communication system
WO2021228230A1 (en) * 2020-05-15 2021-11-18 支付宝(杭州)信息技术有限公司 Data verification method and apparatus based on secure execution environment
CN114244855A (en) * 2020-09-08 2022-03-25 腾讯科技（深圳）有限公司 Fingerprint file storage method, device, equipment and readable storage medium
CN115118446A (en) * 2022-01-22 2022-09-27 南方电网数字电网研究院有限公司 Data security control method and system
CN115988002A (en) * 2023-02-16 2023-04-18 荣耀终端有限公司 Data transmission method and electronic equipment

Citations (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103002029A (en) * 2012-11-26 2013-03-27 北京百度网讯科技有限公司 Management method, system and client for uploaded files
CN103595696A (en) * 2012-08-15 2014-02-19 中兴通讯股份有限公司 Method and device for file ownership certification
CN103780607A (en) * 2014-01-13 2014-05-07 西安电子科技大学 Repeating-data deleting method based on different permissions and system thereof
CN103944988A (en) * 2014-04-22 2014-07-23 南京邮电大学 Repeating data deleting system and method applicable to cloud storage
CN104917609A (en) * 2015-05-19 2015-09-16 华中科技大学 Efficient and safe data deduplication method and efficient and safe data deduplication system based on user perception
CN105141602A (en) * 2015-08-18 2015-12-09 西安电子科技大学 File ownership proof method based on convergence encryption
CN105681273A (en) * 2015-12-17 2016-06-15 西安电子科技大学 Client data deduplication method
CN105868305A (en) * 2016-03-25 2016-08-17 西安电子科技大学 A fuzzy matching-supporting cloud storage data dereplication method
CN105915332A (en) * 2016-07-04 2016-08-31 广东工业大学 Cloud storage encryption and dereplication method and cloud storage encryption and dereplication system
CN105939191A (en) * 2016-07-08 2016-09-14 南京理工大学 Client secure deduplication method of ciphertext data in cloud storage
CN106101257A (en) * 2016-07-07 2016-11-09 广东工业大学 A kind of cloud storage data managing method based on Bloom filter and device
CN106100832A (en) * 2016-06-12 2016-11-09 广东工业大学 Key management method based on convergent encryption in a kind of cloud storage data deduplication
CN106412087A (en) * 2016-10-25 2017-02-15 福建师范大学 Method and system for sharing ownership proofs
CN106685977A (en) * 2017-01-03 2017-05-17 武汉虹信技术服务有限责任公司 Account system construction method based on intelligent community cloud platform
CN106878318A (en) * 2017-03-03 2017-06-20 钱德君 A kind of block chain real time polling cloud system
CN106888087A (en) * 2017-03-15 2017-06-23 腾讯科技（深圳）有限公司 A kind of method and apparatus for managing certificate
US20170322733A1 (en) * 2013-02-26 2017-11-09 International Business Machines Corporation Determining when to use convergent encryption

Patent Citations (17)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103595696A (en) * 2012-08-15 2014-02-19 中兴通讯股份有限公司 Method and device for file ownership certification
CN103002029A (en) * 2012-11-26 2013-03-27 北京百度网讯科技有限公司 Management method, system and client for uploaded files
US20170322733A1 (en) * 2013-02-26 2017-11-09 International Business Machines Corporation Determining when to use convergent encryption
CN103780607A (en) * 2014-01-13 2014-05-07 西安电子科技大学 Repeating-data deleting method based on different permissions and system thereof
CN103944988A (en) * 2014-04-22 2014-07-23 南京邮电大学 Repeating data deleting system and method applicable to cloud storage
CN104917609A (en) * 2015-05-19 2015-09-16 华中科技大学 Efficient and safe data deduplication method and efficient and safe data deduplication system based on user perception
CN105141602A (en) * 2015-08-18 2015-12-09 西安电子科技大学 File ownership proof method based on convergence encryption
CN105681273A (en) * 2015-12-17 2016-06-15 西安电子科技大学 Client data deduplication method
CN105868305A (en) * 2016-03-25 2016-08-17 西安电子科技大学 A fuzzy matching-supporting cloud storage data dereplication method
CN106100832A (en) * 2016-06-12 2016-11-09 广东工业大学 Key management method based on convergent encryption in a kind of cloud storage data deduplication
CN105915332A (en) * 2016-07-04 2016-08-31 广东工业大学 Cloud storage encryption and dereplication method and cloud storage encryption and dereplication system
CN106101257A (en) * 2016-07-07 2016-11-09 广东工业大学 A kind of cloud storage data managing method based on Bloom filter and device
CN105939191A (en) * 2016-07-08 2016-09-14 南京理工大学 Client secure deduplication method of ciphertext data in cloud storage
CN106412087A (en) * 2016-10-25 2017-02-15 福建师范大学 Method and system for sharing ownership proofs
CN106685977A (en) * 2017-01-03 2017-05-17 武汉虹信技术服务有限责任公司 Account system construction method based on intelligent community cloud platform
CN106878318A (en) * 2017-03-03 2017-06-20 钱德君 A kind of block chain real time polling cloud system
CN106888087A (en) * 2017-03-15 2017-06-23 腾讯科技（深圳）有限公司 A kind of method and apparatus for managing certificate

Non-Patent Citations (2)

* Cited by examiner, † Cited by third party
Title
何蒲等: "《区块链技术与应用前瞻综述》", 《计算机科学》 *
周玉坤等: "《面向数据去重的基于二次哈希的收敛加密策略》", 《计算机工程与科学》 *

Cited By (45)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2019114097A1 (en) * 2017-12-15 2019-06-20 成都链一网络科技有限公司 Blockchain-based distributed storage method
CN108256327A (en) * 2017-12-22 2018-07-06 新华三信息安全技术有限公司 A kind of file test method and device
CN108256327B (en) * 2017-12-22 2020-12-29 新华三信息安全技术有限公司 File detection method and device
CN110019347B (en) * 2018-01-02 2021-05-25 ***通信有限公司研究院 Data processing method and device of block chain and terminal equipment
CN110019347A (en) * 2018-01-02 2019-07-16 ***通信有限公司研究院 A kind of data processing method, device and the terminal device of block chain
CN110109883A (en) * 2018-01-25 2019-08-09 卓望数码技术（深圳）有限公司 A kind of file filters weight storage method and device
CN110109883B (en) * 2018-01-25 2023-06-27 卓望数码技术（深圳）有限公司 File filtering and storing method and device
CN108280628A (en) * 2018-02-01 2018-07-13 泰康保险集团股份有限公司 Core based on block chain technology pays for method, apparatus, medium and electronic equipment
CN108809932B (en) * 2018-04-09 2021-11-02 杭州拾贝知识产权服务有限公司 Block chain-based deposit certificate system, method and readable medium
CN108809932A (en) * 2018-04-09 2018-11-13 杭州拾贝知识产权服务有限公司 A kind of deposit system, method and readable medium based on block chain
CN108833460A (en) * 2018-04-10 2018-11-16 平安科技（深圳）有限公司 Music distribution method, apparatus and terminal device based on block chain
CN108664623A (en) * 2018-05-14 2018-10-16 中钞***产业发展有限公司杭州区块链技术研究院 A kind of date storage method, device, equipment and medium
CN108765683A (en) * 2018-05-23 2018-11-06 栾友祥 A kind of ballot system based on block chain technology
CN108932297A (en) * 2018-06-01 2018-12-04 阿里巴巴集团控股有限公司 A kind of data query, data sharing method, device and equipment
CN108932297B (en) * 2018-06-01 2022-03-22 创新先进技术有限公司 Data query method, data sharing method, device and equipment
CN108920966A (en) * 2018-06-25 2018-11-30 北京奇虎科技有限公司 A kind of block chain deposits card, evidence collecting method and device
CN109241754A (en) * 2018-08-14 2019-01-18 广东工业大学 A kind of cloud file data de-duplication method based on block chain
CN109088720A (en) * 2018-08-14 2018-12-25 广东工业大学 A kind of encryption file De-weight method and device based on mixing cloud storage
CN109241754B (en) * 2018-08-14 2021-08-03 广东工业大学 Cloud file repeated data deleting method based on block chain
CN109214933A (en) * 2018-08-22 2019-01-15 泰康保险集团股份有限公司 Approaches to IM, device, medium and electronic equipment based on block chain
CN109409122A (en) * 2018-09-13 2019-03-01 远光软件股份有限公司 File memory method and its electronic equipment, storage medium
CN109409122B (en) * 2018-09-13 2022-08-16 远光软件股份有限公司 File storage method, electronic device and storage medium
CN109302491A (en) * 2018-11-13 2019-02-01 爱普（福建）科技有限公司 A kind of industry internet framework and its operation method based on block chain
CN111324902A (en) * 2018-12-14 2020-06-23 航天信息股份有限公司 Data access method, device and system based on block chain
CN109768987A (en) * 2019-02-26 2019-05-17 重庆邮电大学 A kind of storage of data file security privacy and sharing method based on block chain
CN110099108B (en) * 2019-04-26 2022-04-01 深圳前海微众银行股份有限公司 Block chain event duplicate removal method and device, computer equipment and storage medium
CN110099108A (en) * 2019-04-26 2019-08-06 深圳前海微众银行股份有限公司 A kind of block chain event De-weight method, device, computer equipment and storage medium
WO2020216077A1 (en) * 2019-04-26 2020-10-29 深圳前海微众银行股份有限公司 Blockchain event deduplication method and apparatus, and computer device and storage medium
CN110719163A (en) * 2019-09-29 2020-01-21 联想(北京)有限公司 Information processing method, device and storage medium
CN110768979A (en) * 2019-10-22 2020-02-07 王慧君 Formica algorithm-based block chain big data processing method and system
CN111078649A (en) * 2019-12-12 2020-04-28 中国建设银行股份有限公司 Block chain-based on-cloud file storage method and device and electronic equipment
CN113453191A (en) * 2020-03-27 2021-09-28 本田技研工业株式会社 Communication system and control method of communication system
WO2021228230A1 (en) * 2020-05-15 2021-11-18 支付宝(杭州)信息技术有限公司 Data verification method and apparatus based on secure execution environment
CN111831743A (en) * 2020-06-05 2020-10-27 广东科学技术职业学院 Block chain data storage system and method based on cloud storage
CN111832069A (en) * 2020-06-05 2020-10-27 广东科学技术职业学院 Multi-block chain on-chain data storage system and method based on cloud computing
CN111831743B (en) * 2020-06-05 2023-11-14 广东科学技术职业学院 Block chain data storage system and method based on cloud storage
CN111832069B (en) * 2020-06-05 2023-08-29 广东科学技术职业学院 Multi-block chain on-chain data storage system and method based on cloud computing
CN114244855A (en) * 2020-09-08 2022-03-25 腾讯科技（深圳）有限公司 Fingerprint file storage method, device, equipment and readable storage medium
CN114244855B (en) * 2020-09-08 2024-01-02 腾讯科技（深圳）有限公司 Fingerprint file storage method, device, equipment and readable storage medium
CN112700800A (en) * 2021-02-18 2021-04-23 深圳星算科技有限公司 Distributed storage device of block chain
CN112926091A (en) * 2021-03-26 2021-06-08 支付宝(杭州)信息技术有限公司 Block chain-based data ownership recording and data transaction verification method and device
CN112926091B (en) * 2021-03-26 2022-08-12 支付宝(杭州)信息技术有限公司 Block chain-based data ownership recording and data transaction verification method and device
CN115118446A (en) * 2022-01-22 2022-09-27 南方电网数字电网研究院有限公司 Data security control method and system
CN115988002B (en) * 2023-02-16 2023-08-15 荣耀终端有限公司 Data transmission method and electronic equipment
CN115988002A (en) * 2023-02-16 2023-04-18 荣耀终端有限公司 Data transmission method and electronic equipment

Also Published As

Publication number Publication date
CN107295002B (en) 2020-06-19

Similar Documents

Publication Publication Date Title
CN107295002A (en) The method and server of a kind of high in the clouds data storage
US20240126895A1 (en) Data security using request-supplied keys
CN114726643B (en) Data storage and access methods and devices on cloud platform
JP7007985B2 (en) Resource locator with key
EP3726412B1 (en) Selectively verifying personal data
CN110535833B (en) Data sharing control method based on block chain
EP2956852B1 (en) Data security service
CN109274652B (en) Identity information verification system, method and device and computer storage medium
US8898452B2 (en) Protocol translation
CN104980477A (en) Data access control method and system in cloud storage environment
CN103959302A (en) Systems and methods for secure distributed storage
CN103229165A (en) Systems and methods for secure remote storage
US11621834B2 (en) Systems and methods for preserving data integrity when integrating secure multiparty computation and blockchain technology
CN111464295B (en) Bank card making method and device
JP2023542681A (en) Integrating device identity into blockchain permission frameworks
CN112861157A (en) Data sharing method based on decentralized identity and proxy re-encryption
CN113766012B (en) Method and system for distributed rapid encryption distribution and transmission of electronic bidding document
CN111753014A (en) Identity authentication method and device based on block chain
CN115567312B (en) Alliance chain data authority management system and method capable of meeting various scenes
CN107040520A (en) A kind of cloud computing data-sharing systems and method
Sevis et al. Survey on data integrity in cloud
WO2024011863A9 (en) Communication method and apparatus, sim card, electronic device, and terminal device
WO2022132718A1 (en) Technologies for trust protocol with immutable chain storage and invocation tracking
CN111682934A (en) Storage, access and sharing method and system for comprehensive energy metering data
Chang et al. A dependable storage service system in cloud environment

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant