多域环境下的网络存储系统

doi:10.3969/j.issn.1001-2400.2010.06.022

J4 ›› 2010, Vol. 37 ›› Issue (6): 1103-1106+1118.doi: 10.3969/j.issn.1001-2400.2010.06.022

多域环境下的网络存储系统

段新东;马建峰

(西安电子科技大学计算机网络与信息安全教育部重点实验室，陕西西安 710071)

收稿日期:2010-05-18 出版日期:2010-12-20 发布日期:2011-01-22
通讯作者: 段新东
作者简介:段新东(1974-)，男，西安电子科技大学博士研究生，E-mail: xdduan@mail.xidian.edu.cn．
基金资助:
国家自然科学基金重点资助项目(60633020);国家自然科学基金资助项目(60573036,60702059);国家“863”计划资助项目(2007AA01Z429)

Network storage system in multi-domain environments

DUAN Xin-dong;MA Jian-feng

(Ministry of Education Key Lab. of Computer Network and Information Security, Xidian Univ., Xi'an 710071， China)

Received:2010-05-18 Online:2010-12-20 Published:2011-01-22
Contact: DUAN Xin-dong

摘要/Abstract

摘要：

针对OSD和SAN对构建海量存储系统的缺点，基于NASD网络存储系统构建了一个多域环境下的网络存储系统，由不同的服务器对用户进行身份认证与访问授权，改进了原系统不易大规模扩展和服务器的瓶颈缺点;给出了实现系统关键的网络存储协议，并利用CK模型对其进行了安全性分析．结果表明，新系统具有高带宽、低延时、易扩展、规模大、安全性高、低成本的特点，是一个适合海量存储的系统．

关键词: 海量存储, 多域环境, 网络存储协议, 可证明安全

Abstract:

The OSD and SAN have their own disadvantage in constructing the mass storage system. In this paper, a network storage system in multi-domain environments based on NASD is proposed. Such a system will realize authentication and issue capabilities in different servers, which can improve the expansibility and the bottleneck of the server for the original system. At the same time, a secure storage network protocol for the new system is proposed and analyzed by using the CK model. Results show that the new system has a high bandwidth, low latency, expansibility, large-scale, high security and low cost so that it is suitable for a mass storage system.

Key words: mass storage, multi-domain environments, storage network protocol, provable security

中图分类号:

TP309

段新东;马建峰. 多域环境下的网络存储系统[J]. J4, 2010, 37(6): 1103-1106+1118.

DUAN Xin-dong;MA Jian-feng. Network storage system in multi-domain environments[J]. J4, 2010, 37(6): 1103-1106+1118.

参考文献

[1] SNIA-Storage Networking Industry Association. OSD: Object Based Storage Devices Technical Work Group[EB/OL].[2010-05-11]. http://www.snia.org/tech activities/workgroups/osd/.
[2] Factor M, Meth K, Naor D, et al. Object Storage: the Future Building Block for Storage Systems[C]//Local to Global Data Interoperability-Challenges and Technologies. Sardinia: IEEE Press, 2005: 119-123.
[3] Kher V, Kim Y. Securing Distributed Storage: Challenges, Techniques, and Systems[C]//StorageSS'05. Virginia: ACM, 2005: 9-25.
[4] Gibson G A, Nagle D F, Courtright W, et al. NASD Scalable Storage Systems[C]//Proceedings of the USENIX'99 Extreme Linux Workshop. Monterey: USENIX. 1999: 121-130.
[5] Halevi S, Karger P A, Naor D. Enforcing Confinement in Distributed Storage and a Cryptographic Model for Access Control[EB/OL].[2010-05-11]. http://eprint.iacr.org/2005/169.
[6] Garg D. Proof Theory for Authorization Logic and Its Application to a Practical File System[D]. Pittsburgh: School of Computer Science, 2009.
[7] Garg D, Pfenning F. A Proof-carrying File System[R]. Pittsburgh: MU-CS-09-123, Carnegie Mellon University, 2009.
[8] Blanchet B. Automatic Verification of Correspondences for Security Protocols[J]. Journal of Computer Security, 2009, 17(4): 363-434.
[9] Niu Zhongying, Jiang Hong, Zhou Ke, et al. Identification and Authentication in Large-Scale Storage Systems[C]//2009 IEEE International Conference on Networking, Architecture, and Storage. Changsha: IEEE Press, 2009: 421-427.
[10] Canetti R, Krawczyk H. Analysis of Key-exchange Protocols and Their Use for Building Secure Channels[C]//Proceedings of EUROCRYPTO'01, LNCS 2045. Berlin: Springer-Verlag, 2001: 453-474.
[11] 张帆, 马建峰. WAPI认证机制的性能和安全性分析[J]. 西安电子科技大学学报, 2004, 31(1): 210-215.
Zhang Fan, Ma Jianfeng. Security Analysis of the Chinese Wireless LAN Standard Implementation Plan[J]. Journal of Xidian University, 2004, 31(1): 210-215.

多域环境下的网络存储系统

Network storage system in multi-domain environments

PDF (PC)

赞

可视化

被引次数

摘要/Abstract

引用本文

使用本文

参考文献

相关文章 8

Metrics

本文评价

推荐阅读 0

[1]	孙瑾;胡予濮. 完全安全的基于属性的广播加密方案[J]. J4, 2012, 39(4): 23-28+154.
[2]	肖鸿;王宏;马润年;崔捷. 随机预言模型下可证安全的门限FFS签名方案[J]. J4, 2011, 38(6): 130-133+151.
[3]	朱辉;李晖;王育民. 一种Canetti-Krawczyk模型下的快速认证协议 [J]. J4, 2009, 36(1): 156-161.
[4]	毛立强1;马建峰1;2. 可证明安全的MANET按需距离矢量路由协议分析 [J]. J4, 2008, 35(6): 1063-1068.
[5]	张乐友1;2;胡予濮2;刘振华1;2. 标准模型下基于身份的可证安全门限签名方案 [J]. J4, 2008, 35(1): 81-86.
[6]	杨超;曹春杰;马建峰. 通用可组合安全的Mesh网络认证协议 [J]. J4, 2007, 34(5): 814-817.
[7]	王宏(1);肖鸿(2);邱刚(2);冯登国(1). 安全分布式乘积产生方案[J]. J4, 2006, 33(1): 156-159.
[8]	陈原;王育民;肖国镇. 公钥密码体制与选择密文安全性[J]. J4, 2004, 31(1): 135-139.