CapsuleFS (CFS) is the first filesystem to integrate multi-credential functionality within a POSIX-compliant framework, utilizing DataCapsule as the storage provider. This innovative system is established based on the Global Data Plane in the area of edge computing. Our comprehensive design and implementation of CFS successfully fulfill the objective of providing a multi-credential Common Access API. The architecture of CFS is methodically segmented into three integral components: Firstly, the DataCapsule server, tasked with the storage, dissemination, and replication of DataCapsules on the edge. Secondly, the middleware, a crucial element running in a Trusted Execution Environment responsible for the enforcement and management of write permissions and requests. Finally, the client component, which manifests as a POSIX-compliant filesystem, is adaptable and operational across many architectures. Experimental evaluations of CFS reveal that, while its read and write performances are comparatively modest, it upholds a high degree of functional correctness. This attribute distinctly positions CFS as a viable candidate for application in real-world software development scenarios. The paper also delineates potential future enhancements, aimed at augmenting the practicality of CFS in the landscape of software development.
翻译:CapsuleFS(CFS)是首个在符合POSIX标准的框架内集成多凭证功能、并以DataCapsule作为存储提供者的文件系统。这一创新系统建立在边缘计算领域的全局数据平面基础上。我们对CFS的全面设计与实现成功达成了提供多凭证通用访问API的目标。CFS的架构被系统地划分为三个核心组成部分:首先,DataCapsule服务器,负责在边缘存储、分发和复制DataCapsule;其次,中间件,作为运行在可信执行环境中的关键组件,负责执行和管理写入权限及请求;最后,客户端组件,表现为一个符合POSIX标准的文件系统,具有高度适应性,可在多种架构上运行。对CFS的实验评估表明,尽管其读写性能相对适中,但系统保持了高度的功能正确性。这一特性使CFS成为实际软件开发场景中可行的候选方案。本文还阐述了未来可能的改进方向,旨在增强CFS在软件开发领域的实用性。