CapsuleFS A Multi-credential DataCapsule Filesystem

TL;DR

CapsuleFS introduces a novel multi-credential filesystem integrated within a POSIX framework, leveraging DataCapsule storage and designed for edge computing, enabling secure, multi-credential access with practical correctness despite moderate performance.

Contribution

This paper presents the first multi-credential POSIX-compliant filesystem using DataCapsule, with a three-component architecture including server, middleware, and client, tailored for edge computing environments.

Findings

Functional correctness is high despite modest read/write performance.

The architecture effectively enforces multi-credential access control.

CFS is suitable for real-world software development scenarios.

Abstract

CapsuleFS (CFS) is the first filesystem to integrate multi-credential functionality within a POSIX-compliant framework, utilizing DataCapsule as the storage provider. This innovative system is established based on the Global Data Plane in the area of edge computing. Our comprehensive design and implementation of CFS successfully fulfill the objective of providing a multi-credential Common Access API. The architecture of CFS is methodically segmented into three integral components: Firstly, the DataCapsule server, tasked with the storage, dissemination, and replication of DataCapsules on the edge. Secondly, the middleware, a crucial element running in a Trusted Execution Environment responsible for the enforcement and management of write permissions and requests. Finally, the client component, which manifests as a POSIX-compliant filesystem, is adaptable and operational across many architectures. Experimental evaluations of CFS reveal that, while its read and write performances are comparatively modest, it upholds a high degree of functional correctness. This attribute distinctly positions CFS as a viable candidate for application in real-world software development scenarios. The paper also delineates potential future enhancements, aimed at augmenting the practicality of CFS in the landscape of software development.