Enhanced authentication method for Hadoop job containers

1. A method of providing content authentication of data in a network having a name node and a data node, comprising:

generating, by a first processing engine on the name node, a first identity value for the content through job specific files and encryption elements;

generating, by a second processing engine on the data node, a second identity value for the content through the job specific files and encryption elements;

associating each data set of the data with a first key identifying a job owner issuing a task for the data set, the first key being a session key that is randomly generated for the task;

and

performing the task if the first identity value matches the second identity value.

2. The method of claim 1 further comprising: packaging the data sets in job specific files into execution containers in a Hadoop Distributed File System (HDFS) network cluster.

3. The method of claim 1 wherein the encryption elements comprise a unique key and an initial value.

4. The method of claim 3 , wherein the unique key comprises a value indicating an identity of a job owner issuing the task, and wherein the initial value comprises a unique session key that is randomly generated for the task.

5. The method of claim 4 further comprising, for each of the first and second processing engines, inputting the job specific files and the unique key into a digestion function to generate digested code, wherein the digestion function comprises a cryptographic hash function.

6. The method of claim 5 wherein the first processing engine comprises a first file signing engine and the second processing engine comprises a second file signing engine, the method further comprising, for each of the first and second file signing engine components, inputting the digested code and the initial value into a combining function to generate a respective identity value of the first and second identity values.

7. The method of claim 6 wherein each of the unique key, initial value, and digested code are of a bit length, k.

8. The method of claim 1 wherein the data node comprises a plurality of data nodes, and wherein the job containers are spread across the plurality of data nodes for execution of the task processing the content.

9. A system of providing content authentication of data in a network having a name node and a data node, comprising:

first hardware processing means of the name node generating a first identity value for the content through job specific files and encryption elements;

second hardware processing means of the data node generating a second identity value for the content through the job specific files and encryption elements;

third hardware processing means associating each data set of the data with a first key identifying a job owner issuing a task for the data set, the first key being a session key that is randomly generated for the task, and performing the task if the first identity value matches the second identity value, wherein the hardware processing means comprise at least a processor and a memory.

10. The system of claim 9 further comprising: a component packaging the data sets in job specific files into execution containers in a Hadoop Distributed File System (HDFS) network cluster.

11. The system of claim 9 wherein the encryption elements comprise a unique key and an initial value.

12. The system of claim 11 wherein the unique key comprises a value indicating an identity of a job owner issuing the task, and wherein the initial value comprises a unique session key that is randomly generated for the task.

13. The system of claim 11 wherein each of the unique key, initial value, and first and second digested codes are of a bit length, k.

14. The system of claim 9 wherein the first hardware processing means comprises:

a first digestion function receiving the unique key and the job specific files to generate first digested code; and

a first combining function receiving the initial value and the first digested code to generate the first identity value for the name node.

15. The system of claim 14 wherein each of the first and second hardware processing means comprises a cryptographic hash function.

16. The system of claim 9 wherein the second hardware processing means comprises:

a second digestion function receiving the unique key and the job specific files to generate second digested code; and

a second combining function receiving the initial value and the second digested code to generate the second identity value for the data node.

17. The system of claim 9 wherein the data node comprises a plurality of data nodes, and wherein the job containers are spread across the plurality of data nodes for execution of the task processing the content.

18. A computer program product, comprising a non-transitory computer-readable medium having a computer-readable program code embodied therein, the computer-readable program code adapted to be executed by one or more processors to perform a method of providing content authentication of data in a network having a name node and a data node, comprising:

generating, by a first processing engine on the name node, a first identity value for the content through job specific files and encryption elements;

generating, by a second processing engine on the data node, a second identity value for the content through the job specific files and encryption elements;

associating each data set of the data with a first key identifying a job owner issuing a task for the data set, the first key being a session key that is randomly generated for the task;

and

performing the task if the first identity value matches the second identity value.