CapsuleFS A Multi-credential DataCapsule Filesystem
Qingyang Hu, Yucheng Huang, and Manshi Yang

TL;DR
CapsuleFS introduces a novel multi-credential filesystem integrated within a POSIX framework, leveraging DataCapsule storage and designed for edge computing, enabling secure, multi-credential access with practical correctness despite moderate performance.
Contribution
This paper presents the first multi-credential POSIX-compliant filesystem using DataCapsule, with a three-component architecture including server, middleware, and client, tailored for edge computing environments.
Findings
Functional correctness is high despite modest read/write performance.
The architecture effectively enforces multi-credential access control.
CFS is suitable for real-world software development scenarios.
Abstract
CapsuleFS (CFS) is the first filesystem to integrate multi-credential functionality within a POSIX-compliant framework, utilizing DataCapsule as the storage provider. This innovative system is established based on the Global Data Plane in the area of edge computing. Our comprehensive design and implementation of CFS successfully fulfill the objective of providing a multi-credential Common Access API. The architecture of CFS is methodically segmented into three integral components: Firstly, the DataCapsule server, tasked with the storage, dissemination, and replication of DataCapsules on the edge. Secondly, the middleware, a crucial element running in a Trusted Execution Environment responsible for the enforcement and management of write permissions and requests. Finally, the client component, which manifests as a POSIX-compliant filesystem, is adaptable and operational across many…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Data Storage Technologies · Security and Verification in Computing · Distributed systems and fault tolerance
