Design of a Trusted File System Based on Hadoop

Abstract

This paper analyses the data security issues in Hadoop platform, and proposes a design of trusted file system for Hadoop. The design uses the latest cryptography-fully homomorphic encryption technology and authentication agent technology, it ensures the reliability and safety from the three levels of hardware, data, users and operations. The homomorphic encryption technology enables the encrypted data to be operable to protect the security of the data and the efficiency of the application. The authentication agent technology offers a variety of access control rules, which are a combination of access control mechanisms, privilege separation and security audit mechanisms, to ensure the safety for the data stored in the Hadoop file system. © Springer-Verlag Berlin Heidelberg 2013.