Research on Data Security of the Storage Network
Ligu Zhu, Zhong Ming · 2006
The storage network (unified storage network, for short USN) by combining a NAS and a SAN has the both advantages of NAS and SAN. Because the USN needs to serve the block I/O requests and the file I/O requests simultaneously, data security is a very difficult to achieve. In order to improve the security for the USN, this paper introduces a solution in two aspects. Firstly, the MUVFS (the multi-user view file system) is presented, which offers a storage volume view for each authorized user, who can only access the data in his own storage volume. Secondly, all users can encrypt and decrypt the data of the themselves storage volume at clients, and the USN server only need to check the users' identities and the data's integrality. Through integration of the MUVFS and security scheme into the USN, the data security mechanism has been realized perfectly with little influence on the system performance. As shown in the experiments, the security mechanism of the USN provides reasonable compromises between the data security and performance