METHOD FOR ENSURING THE INTEGRITY AND AVAILABILITY OF INFORMATION IN DISTRIBUTED DATA STORAGE SYSTEMS Russian patent published in 2022 - IPC G06F11/08 

FIELD: data processing.

SUBSTANCE: invention relates to a method for ensuring the integrity and availability of information in distributed data storage systems. In the method, each of the available data processing blocks with the corresponding data storage units contains a set of data generated from the files corresponding to the data processing blocks with the data storage units, wherein the data set is subjected to the preliminary block encryption procedure with nonlinear bijective transformations, and the generated set of cryptogram blocks of the data processing blocks with the data storage units is distributed among the available data storage units, wherein the corresponding set of redundant data is generated by means of multicode noise-resistant encoding; then the cryptogram blocks received from other data processing blocks with data storage units are removed in order to reduce the overall redundancy, wherein the generated set of redundant data with cryptogram blocks of the data processing blocks with the data storage unit used for the generation thereof is used to recover lost data files; wherein the data recovery block receives information from the control block about which data processing block with the corresponding data storage units are currently available and, accordingly, have a set of information and redundant data of the file; then the data recovery block receives a set of information and redundant data from said data processing block with data storage units, the data recovery block fully recovers lost data files, wherein the data recovered by the data recovery block, jointly with the data of the available data processing blocks with the corresponding data storage units, are transmitted to the data processing block with a data storage unit, newly introduced by the control block, in order to generate redundant data blocks; wherein the data storage units of the distributed data storage system constitute an ordered collection of data storage units, wherein each data storage unit in the subsystem for encryption code protection of information from the file ƒ is used to generate ciphertext blocks supplied to the self-correction block, the generated blocks being distributed among the available storage units, wherein the generated and received ciphertext blocks in the subsystems for encryption code protection of information in the self-correction blocks form an ordered sequence of least non-negative residues modulo m(i) generated by the modulus computation block, thereby forming an information sequence of encryption code structures; then the subsystems for encryption code protection of information in the self-correction blocks, according to the rules for constructing finite differences, are used to execute the expansion operation, wherein according to said operation, for the generated information sequence of encryption code structures, redundant data blocks are calculated in the corresponding data storage units, while the control subsystems of the data storage units make the decisions on the required number of ciphertext blocks of the data storage units, wherein part of said blocks is removed, and the collection of ciphertext blocks and redundant data blocks is used by the subsystems for encryption code protection of information by the self-correction blocks of the data storage units in order to ensure the integrity and availability of data.

EFFECT: ensured integrity and availability of information in distributed storage systems.

1 cl, 5 dwg