网络存储环境下基于RADIUS的DH-CHAP方案

DH-CHAP project based on RADIUS for network storage

针对现存网络存储系统安全的脆弱性,基于强安全性、高灵活性、可扩展性好的设计思想,设计了一个基于远程拨号用户认证服务(Remote Authentication D ial In User Service,RAD IUS)的DH挑战握手认证协议(D iffie Hellman Challenge Handshake Authentication Protoco,DH-CHAP)身份认证方案,为数据保护的框架结构提供了授权、机密性与完整性保护的基础。

Network storage technology is one of the hottest technology in recent several years. Network storage has changed the way enterprises manage their storage environments. It is crucial to safeguard data, regardless of whether it is retained at-rest inside storage systems, or in-flight across the storage network, LAN, or WAN. Aiming at the frangibility of exsiting network storage system and on the basis of the design ideas of strong security, high agility and fine scalability, a DHCHAP authentication project based on RADIUS was designed, it offered a foundation to authorization, confidentiality and integrality for the architecture of data security.