基于 Fabric 和 IPFS 文件共享系统设计与实现-《计算机技术与发展》

文章信息/Info

Title:: Design and Implementation of File Sharing System Based on Fabric and IPFS

作者:: 杨武文¹; 2; 3 ; 马玉鹏¹; 2; 3 ; 王轶¹; 2; 3* ; 赵凡¹; 2; 3 ; 王保全¹; 3; 1. 中国科学院新疆理化技术研究所,新疆乌鲁木齐 830011;
2. 中国科学院大学,北京 100049;
3. 新疆理化技术研究所新疆民族语音语言信息处理实验室,新疆乌鲁木齐 830011

Author(s):: YANG Wu-wen1; 2; 3 ; MA Yu-peng1; 2; 3 ; WANG Yi1; 2; 3* ; ZHAO Fan1; 2; 3 ; WANG Bao-quan1; 3; 1. The Xinjiang Technical Institute of Physics & Chemistry,Chinese Academy of Sciences,Urumqi 830011,China;
2. University of Chinese Academy of Sciences,Beijing 100049,China;
3. Xinjiang Laboratory of Minority Speech and Language Information Processing,The Xinjiang Technical Institute of Physics & Chemistry,Urumqi 830011,China

Keywords:: hyperledger fabric; file sharing; file storage; IPFS; access control

摘要:: 文件的共享需求在人们生产生活中普遍存在,传统的文件存储共享系统大多以中心化技术实现,存在单点故障、文件流向不易受控且版本历史信息难以追溯、防篡改性差等问题,面临数据泄漏与滥用等潜在威胁,在特定场景下难以应用。针对这些问题,设计并实现了一种基于 Fabric 与星际文件系统( InterPlanetary File System,IPFS) 的文件存储与共享系统。结合链上账本与链下可扩展文件系统构建了混合存储,解决了 Fabric 的存储瓶颈并去除存储冗余,实现了文件的防篡改存证、流转信息和历史版本信息的可信追溯;设计并实现了细粒度的权限控制策略,实现了文件资源的受控共享;针对 IPFS 的开放网络特征,采用加密方式,避免了 IPFS 存储中的资源暴露风险,进一步提升了存储文件的安全性;限定相同文件统一密钥,避免相同文件重复加密后存储时浪费额外空间。实验测试结果表明,该系统有效解决了传统文件共享系统中存在的问题,并满足实际应用的性能需求。

Abstract:: The demand for file sharing is common in people爷 s production and life. Most of the traditional file storage and sharing systemsare implemented by centralized technology, and there are some problems such as single point of failure, the file flow is not easy tocontrol,the version history information is difficult to trace,and the poor tamper-proof. Faced with potential threats such as data leakageand abuse,it is difficult to apply in specific scenarios. To solve these problems,a file storage and sharing system based on Fabric and InterPlanetary File System ( IPFS) is designed and implemented. Hybrid storage is built by combining on-chain ledger and off-chain expandable file system,which solves storage bottleneck and storage redundancy in Fabric,and implements tamper-proof storage,flow information,and reliable traceability of historical version information of files. A fine - grained access control strategy is designed andimplemented to control file resource sharing. In view of the open network characteristics of IPFS, encryption is adopted to avoid theexposure risk of resources in IPFS storage and further improve the security of stored files. The unified key for the same file can avoidwasting extra space when the same file is repeatedly encrypted. The experimental results show that such system effectively solves theproblems existing in the traditional file sharing system and meets the performance requirements of practical applications.