Design and Implementation of Authentication-Free File Sharing for the High-Energy Physics Computing Platforms

doi:10.11871/jfdc.issn.2096-742X.2026.03.004

Abstract

Abstract:

[Objective] To meet the file sharing needs in the computational platform and interactive analysis workbench, this paper designs an authentication-free mechanism for instant, secure sharing via public links. [Methods] Leveraging the INK global authentication framework, permission control logic is implemented using the Linux UGO permission model in conjunction with metadata management. The XRootD framework is employed to abstract underlying differences in heterogeneous distributed storage systems. Multi-dimensional security mechanisms are integrated to safeguard data transmission and access, culminating in a precisely controlled authentication-free file-sharing paradigm. [Results] The mechanism has been successfully deployed on INK workbench, allowing secure, fast public link generation for sharing. XRootD downloads are only 3.2% slower than ordinary downloads from a single-server, with strong performance in distributed storage. [Conclusions] Global authentication, heterogeneous storage adaptation, and fine-grained controls deliver a complete, efficient solution for cross-platform distributed file sharing.

Key words: file sharing, computing platform, interactive analysis, security strategy

OU Ge,LIU Zikai,BI Yujiang,SHI Jingyan. Design and Implementation of Authentication-Free File Sharing for the High-Energy Physics Computing Platforms[J]. Frontiers of Data and Computing, 2026, 8(3): 40-50.

Figures/Tables 12

Fig.1

Fig.2

Fig.3

Table 1

Table 2

Fig.4

Fig.5

Fig.6

Table 3

Table 4

Table 5

Fig.7

References 14

[1]	石京燕, 黄秋兰, 汪璐, 等. 国家高能物理科学数据中心分布式数据处理平台[J]. 数据与计算发展前沿, 2022, 4(1): 97-112.
[2]	IHEP. INK: Interactive ANalysis worKbench[EB/OL]. [2025-03-26]. https://ink.ihep.ac.cn.
[3]	CERN. SWAN: Service for Web-based Analysis[EB/OL]. [2025-10-15]. https://swan.cern.ch.
[4]	北京大学. 高性能计算校级公共平台用户文档[EB/OL]. [2025-10-15]. https://hpc.pku.edu.cn/ug/sc-ow.
[5]	PIPARO D, TEJEDOR E, MATO P, et al. SWAN: A service for interactive analysis in the cloud[J]. Future Generation Computer Systems, 2018, 78(1): 1071-1078. doi: 10.1016/j.future.2016.11.035
[6]	MASCETTI L, GONZALEZ LABRADOR H, LAMANNA M, et al. CERNBox+EOS: end-user storage for science[C]. Journal of Physics: Conference Series, 2015, 664 (6): 62037.
[7]	ScienceMesh Community. cs3api4lab:CS3APIs Jupyterlab Connector[EB/OL]. [2025-10-15]. https://git-hub.com/sciencemesh/cs3api4lab.
[8]	CS3 Organization. cs3-python-client: Python Client for CS3 APIs[EB/OL]. [2025-10-15]. https://github.com/cs3org/cs3-python-client.
[9]	PKUHPC Team. OpenSCOW: Super Computing On Web[EB/OL]. [2025-10-15]. https://github.com/PK-UHPC/OpenSCOW.
[10]	李俊哲, 付振新, 杨宏辉, 等. 面向算力网络的跨集群数据迁移系统的设计和实现[J]. 计算机工程与科学, 2025, 47(5): 775-786.
[11]	IBRAHIM MD. A Comparative Analysis of Open Source Cloud Storage Solutions: ownCloud, Nextcloud, and Seafile[D]. University of Turku, 2022.
[12]	Nextcloud. File Sharing[EB/OL].[2025-10-15]. https://docs.nextcloud.com/server/stable/user_manual/en/fi-les/sharing.html.
[13]	CERN EOS Team. EOS as the present and future solution for data storage at CERN[C]// Proceedings of the International Conference on Middleware, Software Development and Tools, Experiment Frameworks, Tools for Distributed Computing, Bristol: IOP Publishing, 2015: 042042.
[14]	DORIGO A, ELMER P, FURANO F, et al. XROOTD-A highly scalable architecture for data access[J]. WSEAS Transactions on Computers, 2005, 4(4): 472-479.

序号	字段名称	字段说明	定义
1	uuid	UUID	唯一标识符
2	account	集群账号	创建该文件共享用户的集群用户账号
3	file_name	文件名	集群上的共享文件的文件名
4	file_path	文件夹地址	共享文件的文件夹，或文件所在文件夹
5	link_title	标题	分享时显示此标题
6	link_code	访问码	用于生成共享链接
7	permission	访问权限	查看、下载
8	access_code	访问密码	非必填，录入访问密码才能看到文件
9	expiry_time	过期时间	非必填，共享链接的过期时间
10	locked	锁定	默认不锁定，设为锁定后，访问共享链接只能看到共享失效的提示
11	locked_time	锁定时间	记录锁定时间
12	locked_by	锁定人员	记录被谁锁定

序号	字段名称	字段说明	定义
1	uuid	UUID	唯一标识符
2	create_time	创建时间	创建日志的时间
3	sharedfile_id	共享文件uuid	共享信息表中共享文件的uuid，外键
4	ip	IP地址	访问共享文件的用户IP地址
5	action	执行动作	查看、下载
6	link_title	共享文件标题	帮助快速筛选识别用户访问的共享文件
7	link_code	访问码
8	request_url	请求地址	用户请求的地址
9	user_identity	用户身份UID	存储于用户端 Cookie 中的用户标识

序号	环境类型	硬件配置详情	说明
1	展示层-网站	Intel (R) Xeon (R) Gold 5320 CPU 52核，128 G RAM，25 Gbps	Linux，Docker容器启动服务包括Nginx+Python+Redis+Mysql
2	业务层-API网关	Intel (R) Xeon (R) Gold 5320 CPU 52核，256 G RAM，25 Gbps	Linux，Docker容器启动服务包括Python+Redis+Mysql
3	XRootD服务器	Intel (R) Xeon (R) Gold 5320 CPU 52核, 256 G RAM，25 Gbps	Linux，XRootD
4	测试机（台式机）	Intel(R) Core (TM) i7-10700 CPU @2.90 GHz，32G RAM	Windows操作系统网速120 MB/s

请求内容	请求次数			响应时间（毫秒）
请求内容	总共	成功	请求/秒	最小值	50th pct	75th pct	95th pct	99th pct	最大值	平均值
创建共享	100	100	100	9	268	321	407	408	408	247
获取共享文件	100	100	100	95	505	545	575	591	602	442

文件大小（G）	普通下载时间(s)	XRootD下载时间(s)	时间差值	时间差值%	普通下载（MB/s）	XRootD下载（MB/s）	速度差值	速度差值%
5	53	53	0	0	94.31	93.61	0.70	0.74%
10	98	106	8	8.16%	101.99	94.20	7.79	7.64%
15	147	149	2	1.36%	101.48	100.42	1.06	1.04%
20	190	196	6	3.16%	105.47	101.92	3.55	3.37%
平均	-	-	-	3.17%	-	-	-	3.20%