Journal of University of Chinese Academy of Sciences >
An AD-based private cloud storage access control scheme
Received date: 2014-09-01
Revised date: 2015-03-03
Online published: 2015-09-15
Nowadays, AD(active directory) is usually used to carry out the unified identity management and achieve access control systems of most enterprises, but many cloud storage devices do not support connection to the AD directly. We propose a scheme to connect cloud storage device and AD. The scheme uses the Samba file access control server to communicate with the AD server and the cloud storage device, and user achieves single sign-on and access control through the AD domain accounts, which greatly improves the work efficiency and enhances the overall security of the system.
Key words： AD; cloud storage; access control; Samba
LI Congwu , PAN Wuqiong , LIN Jingqiang . An AD-based private cloud storage access control scheme[J]. Journal of University of Chinese Academy of Sciences, 2015 , 32(5) : 676 -681 . DOI: 10.7523/j.issn.2095-6134.2015.05.014
[1] 江伟玉, 刘丽敏, 查达仁. 面向云存储的访问控制服务研究[J]. 信息网络安全, 2013 (10): 34-37.
[2] 王冠,范红,杜大海. 云存储访问控制方案的安全性分析与改进[J]. 计算机应用, 2014, 34(2): 373-376.
[3] 傅颖勋, 罗圣美, 舒继武. 安全云存储系统与关键技术综述[J]. 计算机研究与发展, 2013, 50(1): 136-145.
[4] 王安俊, 刘萍, 武涛. Windows2000 活动目录技术的分析与研究[J]. 计算机工程与设计, 2003, 24(4): 21-24.
[5] 李发旭, 卫良. Windows2000 活动目录技术及其应用[J]. 青海师范大学学报: 自然科学版, 2004 (1): 36-39.
[6] 邹念, 唐宁九. 用 Samba 实现 Linux 和 Windows 之间的文件共享[J]. 计算机应用研究, 2002, 19(1): 152-153.
[7] 谭良, 蒲红梅, 周明天. Samba 服务器共享资源安全系统层次模型研究[J]. 计算机应用, 2004, 24(2): 115-117.
[8] 齐忠厚. Kerberos 协议原理及应用[J]. 计算机工程与科学, 2000, 22(5): 11-13.
[9] 刘承凌, 刘发贵. 基于 Samba 的文件共享及安全认证机制的研究[J]. 计算机应用与软件, 2006, 23(1): 122-124.
[10] 邱航, 权勇. 基于 Kerberos 的单点登录系统研究与设计[J]. 计算机应用, 2003, 23(7): 142-144.
/
| 〈 |
|
〉 |