RPC-based secure file system.

Python 3.5 or above. Install requirements in the repository.

To run the program do the following:

1. Run the name server

python name_server.py

2. Run storage server

python rpc_server.py <server_id> <port>

3. Run client
   

   • To sign up:

     python rpc_client.py signup <username> <password>
     

   • To log in:

     python rpc_client.py login <username> <password>
     

All options used as command-line commands.

The name server keeps a database to store user, file and server data in separate tables. It also implements methods to alter these tables and serve data when requested, such as deleting and saving to databases, getting user credentials and server addresses. It is implemented using SimpleXMLRPCServer class of xmlrpc module of Python. The methods implemented by name server can be called by both the client and the server through RPC, as it aims to ensure the communication between the two and them and itself.

The tables are as shown below:

• Users table: | USERID | USERNAME | PASSWORD | SALT | |------|------|------|------|------|------| |integer|text|text|text|

• Files table:

  FILEID	USERID	SERVERID	PATH	FILENAME	ISBACKUP	FILEHASH	LASTMODIFIED	USERID	SERVERID
  integer	integer	integer	integer	text	integer	text	integer	FK	FK

• Server table:

  SERVERID	ADDRESS
  integer	text

The server stores files uploaded by the user. In order to guarantee redundancy, every server has a backup server that stores the same files. Servers have two types of directories, one named by the user who owns the directory ('<user_id>') one named by the user and marked as backup ('<user_id>_backup'). When a file is uploaded, its hash is stored in the database. When the file is being fetched, it's hash is recalculated and compared to the hash recorded in the database. If it does not match, the copy in the backup server is checked and sent to the client. The server implements methods to get owner and backup info, hash files, get filenames, create and delete directories and upload, delete and send files. Some of these functions are called by the client to perform the listed actions and others are used internally.

The client implements the parts of the system the user directly interacts with. It connects to name server using a proxy to connect to the server the user's files are hosted. It operates in two modes: sign up and log in. In sign-up mode, it makes a request to the name server to register the user. The name server checks whether the username is unique and registers the user if no problems occur. In login mode, the client presents the user with multiple options as explained in How to Use. While uploading and downloading files, files are encyrpted and decrpyted on client-side. Only encrypted binaries of files are kept on servers.

To ensure security, passwords are hashed using a user-specific salt and the files are encrypted using the hashed password. Users can navigate through their directories but cannot move up after they reach the directory named after their user IDs. When the user wants to update a file, the old version is replaced by the new one and its hash is recalculated. The most recent hash is kept in the database of name server and when the user wants to fetch the file, this hash is compared to the hash calculated at the time of request. When hashes don't match, the server connects to the backup server to check the hash of the backup file. Keeping backup files and keeping and comparing hashes ensures currency. bcrypt and cryptography are used to hash passwords and file binaries respectively.

RPC is a form of inter-process communication that allows one program to make calls to execute a method on another machine. The fact that machines where the call was made and the method is executed are different is irrelevant to the programmer as the programmer makes calls as if they are being executed locally. The communication happens between client(s) and server(s). Since xmlrpc is used, client(s) and server(s) communicate through XML documents. The client uses a proxy to connect to a given server.

GitHub

https://remotemysql.com/phpmyadmin/db_structure.php?server=1&db=gYvrnIeX6r