Research And Implementation Of Distributed Security Storage Network System

In recent years, with the rapid growth of data, the storage network represented by DAS, NAS and SAN becomes the data storage center for information systems. The storage systems gradually become the malicious attackers'key target, with the network trend of the storage systems. Storage system security becomes an urgent issue, for the damage and leakage of data led by malicious attacks.A distributed security storage scheme for NAS and SAN storage network—DS3 (Distributed Security Storage System) is proposed in this paper. In the scheme, data in NAS and SAN storage network can be allsidely protected by the three-side mode—"Center Controller-Agent Controller-Terminal User".A metadata file associated with corresponding data file is designed in DS3 scheme, which stores users'permission for accessing data files. This mechanism implements the access control of DS3 system. For data security in storage medium, the AES and RC4 cryptography algorithm are adopted for data encryption/decryption. A scheme for key distribution designed based on Leighton & Micali algorithm provides security mechanism for the key transmission among all entities in DS3 system. A file system filter driver which runs in kernel mode is designed for file I/O interception and file data encryption/decryption, that guarantees the file data is stored in the form of ciphertext and prevents the data from being obtained illegally even if the storage mediums are stolen. The UMC (User Mode Component) communication protocol is designed for data transmission among all entities of the system in a safe manner. The DS3 scheme can provide better protection for the data in storage network.