The Secure Storage System Based On Storage Area Network

With the rapid development for computer science in the internet of things, the storage architecture has earth-shaking transformation and the demand is also growing. The Storage capacity, scalability, convenience and security performance requirements also grow rapidly with the development of technology and information updates.This thesis is the summary by the author for the design, implementation for the Secure Storage System based on Storage Network Area (SAN). It covers all the study by the author for the system:build a secure, real-time Linux kernel, disk encryption, information authentication, identity authority, the software of management and benchmark for some important performance and analysis for the Secure Storage System.The author have finished the Secure Storage System based on Fibre Channel (FC) SAN and Internet Protocol (IP) SAN during the study of the storage system. The system is divided into two main parts:the key management system and the encryption engine. The main functions provided by encryption engine include the following:finds all the storage devices in SAN and maps them to the encryption engine, uses XTS and CBS encryption modes and AES, DES, Blowfish Algorithms to encrypt the storage devices and decrypt the storage devices and other operations according to the keys which provided by the key management part. The key management system will provide the information authentication, identity authority and other functions for the Secure Storage System based on SAN. There also is management software on the key management system which makes the administrator easier to manage the whole system, such as creating encryption disk, assigning the encryption disks to hosts, updating keys and so on. There is a benchmark for the encryption disks’read/write and plain disks’read/write and analyses the results to have a clear understanding for the system.