一种认证增强的对象存储安全机制设计

Authentication Enhanced Object-based Storage Security Mechanism

在基于对象的存储结构中,客户端与基于对象的存储设备(OSD)直接交互,可以提高访问性能。但是,这给存储系统带来了安全风险。提出了一套用于对象存储系统的新的安全机制,该机制在对象存储访问的主要通信环节均采用安全密钥交换措施,并对双方身份进行双向认证,避免了多类网络攻击,从而提高了对象存储系统的安全性。

To improve the access performance,the client communicates with the object-based storage device（OSD） directly in the object-based storage structure.But this brings security questions.In this paper,a set of new security mechanism for the object-based storage system was proposed.In which,by using the secure key agreement and mutual authentication protocol in the main communications between the devices of the object-based storage system,it can prevent most of the network attacks,and so improves the security of the object-based storage system totally.