US 11,238,175 B2 · File system permission setting method and apparatus

Abstract

A data access method in a file system comprises receiving a data access request including an identifier of a to-be-accessed node, obtaining access permission for the to-be-accessed node based on the identifier of the to-be-accessed node, wherein when a permission version number of the to-be-accessed node is not the latest in permission version numbers of all nodes indicated by path information of the to-be-accessed node in a file system, the access permission for the to-be-accessed node inherits a permission record corresponding to a parent node that is of the to-be-accessed node and that has a latest permission version number, and performing authentication based on the access permission for the to-be-accessed node, and accessing data of the to-be-accessed node after the authentication succeeds.

Claims20

Dependent claims

A data access method, implemented by a file system, comprising:

receiving a data access request, wherein the data access request comprises an identifier of a to-be-accessed node;
obtaining access permission for the to-be-accessed node based on the identifier of the to-be-accessed node, wherein the access permission inherits a permission record corresponding to a parent node that is of the to-be-accessed node and that has a latest permission version number when a permission version number of the to-be-accessed node is not the latest in permission version numbers of all nodes indicated by path information of the to-be-accessed node;
and
performing authentication based on the access permission;
and
accessing data of the to-be-accessed node after the authentication succeeds.

3 more elements

A data access apparatus for a file system, comprising:

an interface configured to receive a data access request, wherein the data access request comprises an identifier of a to-be-accessed node;
a processor coupled to the interface;
and
a memory coupled to the processor and storing instructions that, when executed by the processor, cause the processor to be configured to:
obtain access permission for the to-be-accessed node based on the identifier of the to-be-accessed node;
perform authentication based on the access permission;
and
access data of the to-be-accessed node after the authentication succeeds, wherein the access permission inherits a permission record corresponding to at least one parent node that is of the to-be-accessed node and that has a latest permission version number when a permission version number of the to-be-accessed node is not the latest in permission version numbers of all nodes indicated by path information of the to-be-accessed node.

5 more elements

A computer program product comprising computer-executable instructions stored on a non-transitory computer-readable medium that, when executed by a processor, cause a data access apparatus to:

receive a data access request, wherein the data access request comprises an identifier of a to-be-accessed node;
obtain access permission for the to-be-accessed node based on the identifier of the to-be-accessed node, performing authentication based on the access permission, and access data of the to-be-accessed node after the authentication succeeds, wherein the access permission for the to-be-accessed node inherits a permission record corresponding to a parent node that is of the to-be-accessed node and that has a latest permission version number when a permission version number of the to-be-accessed node is not the latest in permission version numbers of all nodes indicated by path information of the to-be-accessed node.

Dependencies are inferred from the claim text.

Facts

Application

16/718,995Filed 18 Dec 2019 · continuation

Priority

CN 201710526991.030 Jun 2017

Published

US 2020/0125758 A123 Apr 2020

Granted

1 Feb 2022

Term ends

Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
G06F 16/1827
Implemented using Network-attached Storage [NAS] architecture: management specifically adapted to NAS
G06F 21/6209
Protecting access to data via a platform, e.g. using keys or access control rules: to a single file or object, e.g. in a secure envelope,…
G06F 21/6281
To a system of files or objects, e.g. local or distributed file system or database: at program execution time, where the protection is within the…

File system permission setting method and apparatus

Life of this patent

File system permission setting method and apparatus

Life of this patent

Abstract

Claims20