基于对象存储系统中安全机制的研究

Security Mechanism for Object-Based Storage Systems

提出了一种用于基于对象存储(OBS)系统中的安全机制,它采用的基于证书的访问控制机制保证了用户对基于对象的存储设备(OSD)中对象的合法访问以及客户和OSD之间所交换的命令和数据的完整性,而安全的基于对象的文件系统的实现又保证了OSD中所存放的数据的保密性,而且还使得系统具有足够的灵活性实现用户之间数据的共享.另外,实验结果表明,系统采用该安全机制所造成的性能损失也是比较小的.对于随机读写安全所造成的性能损失几乎可以忽略不计;对于顺序读写,性能下降了7%-28%.

This paper proposed a security mechanism for Object-Based Storage （OBS）systems, the access control mechanism based on credential guarantees user＇s legal access to objects in Object-based Storage Devices （OSD） and maintains integrity of commands and data exchange between users and OSD. Also, the implementation of secure object-based file system guarantees privacy of data stored in OSD, and it make the system so flexible to implement data share between users. The experiments results show that in spite of this level of security, the system does not impose much performance penalty. For random accesses, the performance penalty can be ignored, and for sequential disk accesses, there are about 7-28% performance degradation.