Research On Security Authentication Mechanism Of Modern Service-Oriented Distributed File System

With the rapid development of the information technology and knowledge-based industries in recent years, some of the traditional service industries gradually evolve into an information technology-driven new service industry. Vast amounts of information and data has become an indispensable element in the new industry. The storage issues of information data and the security of storage systems have inevitably become the focus of the modern service industry.The core of a distributed storage system security is,to ensure the confidentiality, integrity, authenticity, reliability,availability, and non-repudiation of information, which is transported, exchanged and stored in the public network, through computer, networking, cryptography and security technology.According to the characteristics of modern service industry, combined with the advantages of strict hierarchical certification model and multi-CA certification model, a mixed-certified structure is presented in this paper-----an Extensible Authentication Model Based on Company (EAMBCom).The detail security policies of the model are given. In this paper, a simulation experiments proves the advantage of EAMBCom.View of the shortcomings of the current cross-certification, this paper presents an improved trust list cross-certification method. In order to ensure the security, efficiency, ease of use of data storage, this paper adopts role-based access control mechanisms to improve access performance and designs the role of the distribution module program. In this paper, an optional data storage encryption scheme is provided to users.