Security Mechanism for Distributed GIS Spatial Data Based on Object-based Storage
LI Deren · Acta Geodaetica et Cartographica Sinica · 2007
Massive Spatial data is the very core of current GIS and generally is distributed at different places.A new generation storage model for distributed GIS spatial data based on Object-Based Storage(OBS) has been constructed,which gives an integrated solution to both offer high-performance storage services and secure data sharing.In this model,GIS server,metadata server and storage device are separated,so it is very important to construct a security mechanism for securing distributed GIS spatial data. In this paper,a security mechanism for distributed GIS spatial data is presented based on OBS after analyzing Object-based Storage Device(OSD) security model described in OSD-2 standard.In this mechanism,the security model is a credential-based access control system composed of the following components: ① an OSD device(OBSD);② a security manager;③ a policy/storage manager;④ a GIS server.Commands transfer and data access both need be authorized.The mechanism is composed of three security protocols: GIS Server-Security Manager protocol,Security Manager-OBSD protocol and GIS Server-OBSD protocol.These three protocols maintain integrity,confidentiality and privacy of distributed GIS spatial data.