Method, electronic device and computer program product for data management

Patent metadata

Field	Value
Publication number	US-11599519-B2
Application number	US-202016841054-A
Country	US
Kind code	B2
Filing date	Apr 6, 2020
Priority date	Dec 31, 2019
Publication date	Mar 7, 2023
Grant date	Mar 7, 2023

Abstract

A data management method comprises: receiving, at a first node of a plurality of nodes for collaboratively data processing, a request to perform a target operation at the first node from a second node of the plurality of nodes; obtaining a privilege of the second node from a third node of the plurality of nodes; determining a threshold privilege for performing the target operation based on a type of the target operation; and performing the target operation in accordance with a determination that the privilege of the second node is higher than the threshold privilege. In this manner, the security of data may be improved.

First claim

What is claimed is:

1. A method for data management, comprising:
receiving, at a first node of a plurality of nodes for collaborative data processing, a request to perform a target operation at the first node from a second node of the plurality of nodes;
obtaining, by the first node from a third node of the plurality of nodes, a privilege of the second node maintained by the third node;
determining, by the first node, based on a type of the target operation, a threshold privilege for performing the target operation, the threshold privilege having a first value when the target operation is a first type and a second value when the target operation is a second type; and
in accordance with a determination by the first node that the privilege of the second node is higher than the threshold privilege, performing the target operation;
wherein obtaining the privilege of the second node comprises:
determining the third node for maintaining the privilege from the plurality of nodes based on an identifier of the second node; and
determining the privilege from a distributed hash table maintained by the third node; and
wherein the privilege is a numerical value that is dynamically updated based in part on a determination that the target operation is permitted to be performed.

2. The method according to claim 1 , wherein the target operation comprises at least one of the following: reading existing data, adding new data, or modifying existing data.

3. The method according to claim 1 , further comprising:
in accordance with a determination that the target operation has been performed, causing the third node to adjust the privilege of the second node.

4. The method according to claim 3 , wherein adjusting the privilege comprises:
obtaining a historical time moment at which the first node previously caused the privilege to be updated; and
in accordance with a determination that a time difference between the historical time moment and a current time moment is greater than a predetermined time threshold, causing the third node to update the privilege of the second node.

5. The method according to claim 1 , further comprising:
in accordance with a determination that the privilege of the second node is lower than or equal to the threshold privilege, rejecting to perform the target operation.

6. The method according to claim 1 , further comprising:
in response to determining, at a management node for managing privileges of the plurality of nodes, that an abnormality is present at the second node, causing, by the management node, the third node to adjust the privilege of the second node, the adjustment being based on a type of the abnormality.

7. The method according to claim 1 , wherein the distributed hash table further comprises a hash value corresponding to the second node.

8. An electronic device, comprising:
at least one processing unit;
at least one memory coupled to the at least one processing unit and storing instructions executable by the at least one processing unit, the instructions, when executed by the at least one processing unit, causing the device to perform acts comprising:
receiving, at a first node of a plurality of nodes for collaborative data processing, a request to perform a target operation at the first node from a second node of the plurality of nodes;
obtaining, by the first node from a third node of the plurality of nodes, a privilege of the second node maintained by the third node;
determining, by the first node, based on a type of the target operation, a threshold privilege for performing the target operation, the threshold privilege having a first value when the target operation is a first type and a second value when the target operation is a second type; and
in accordance with a determination by the first node that the privilege of the second node is higher than the threshold privilege, performing the target operation;
wherein obtaining the privilege of the second node comprises:
determining the third node for maintaining the privilege from the plurality of nodes based on an identifier of the second node; and
determining the privilege from a distributed hash table maintained by the third node; and
wherein the privilege is a numerical value that is dynamically updated based in part on a determination that the target operation is permitted to be performed.

9. The device according to claim 8 , wherein the target operation comprises at least one of the following: reading existing data, adding new data, or modifying existing data.

10. The device according to claim 8 , the acts further comprising:
in accordance with a determination that the target operation has been performed, causing the third node to adjust the privilege of the second node.

11. The device according to claim 10 , wherein adjusting the privilege comprises:
obtaining a historical time moment at which the first node previously caused the privilege to be updated; and
in accordance with a determination that a time difference between the historical time moment and a current time moment is greater than a predetermined time threshold, causing the third node to update the privilege of the second node.

12. The device according to claim 8 , the acts further comprising:
in accordance with a determination that the privilege of the second node is lower than or equal to the threshold privilege, rejecting to perform the target operation.

13. The device according to claim 8 , the acts further comprising:
in response to determining, at a management node for managing privileges of the plurality of nodes, that an abnormality is present at the second node, causing, by the management node, the third node to adjust the privilege of the second node, the adjustment being based on a type of the abnormality.

14. A computer program product being tangibly stored in a non-transitory computer storage medium and comprising machine-executable instructions which, when executed by a device, cause the device to:
receive, at a first node of a plurality of nodes for collaborative data processing, a request to perform a target operation at the first node from a second node of the plurality of nodes;
obtain, by the first node from a third node of the plurality of nodes, a privilege of the second node maintained by the third node;
determine, by the first node, based on a type of the target operation, a threshold privilege for performing the target operation, the threshold privilege having a first value when the target operation is a first type and a second value when the target operation is a second type; and
in accordance with a determination by the first node that the privilege of the second node is higher than the threshold privilege, perform the target operation;
wherein obtaining the privilege of the second node comprises:
determining the third node for maintaining the privilege from the plurality of nodes based on an identifier of the second node; and
determining the privilege from a distributed hash table maintained by the third node; and
wherein the privilege is a numerical value that is dynamically updated based in part on a determination that the target operation is permitted to be performed.

15. The computer program product according to claim 14 , wherein the target operation comprises at least one of the following: reading existing data, adding new data, or modifying existing data.

16. The computer program product according to claim 14 , further comprising:
in accordance with a determination that the target operation has been performed, causing the third node to adjust the privilege of the second node.

Assignees

• Emc Ip Holding Co Llc

Inventors

• Lin Zhenzhen
• Wu Pengfei
• Chen Si
• Zhang Ruixue

Classifications

• G06F16/2255

  Hash tables · CPC title

• G06F16/182

  Distributed file systems · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title

• G06F16/1734

  Details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs · CPC title