Alibaba Group Holding Limited

Xiaohui Pei

Lei Wang

Feng Zhang

Jiesheng Wu

Qingda Lu

Li Xu

Qinghua Ye

Liping Bao

Zhiyong Lin

Leilei Tian

Junpu Chen

Methods and systems are provided for improving user authentication and access control by a network file system service in a multi-tenant public cloud environment by receiving a request for a connection to a file system from a file system client (client), sending an identification request for identification authentication of the client to a control system, receiving a response from the control system, establishing the connection to the file system upon determining that the connection to the file system is allowed based on cloud tenant information associated with the client, receiving an attempt to access the file system from the client by a sub-user, authenticating the sub-user based on the cloud tenant information, issuing a security token including a globally unique sub-user identifier of the sub-user, and using the security token to determine access rights of the sub-user to the file system for a subsequent request.

Authentication and authorization for cloud file system

Growing community of inventors

Hangzhou, China

Xiaohui Pei