Design And Implementation Of SAN Device Access Control In Unified Storage Platform

Nowadays, many storage technologies are still in the research stage. Technology of SAN has more flexibility and scalability, including FC SAN which is based on Fibre Channel and IP SAN which is IP-based. FC SAN transports data in a high speed and has a good scalability, however, its transmission distance is very short and the price is so high, and IP SAN has good solution to these problems. Accordingly, Unified Storage Platform designed to achieve the storage systems architecture of the IP SAN and FC SAN interoperability and integration, Unified Storage Platform mapping the long-distance storage resources to itself, makes virtualization of these resources, and offer block-level storage services to outside.As the current storage devices do not have a built-in security mechanism, in the Unified Storage systems to achieve different levels of demands for the user or application server storage different dynamic allocation of resources is especially important. In order to achieve the requirements, it could use access control mechanisms to protect the security of the Unified Storage Platform. Thus, based on the analysis of several major access control mechanisms, by using Zoning, LUN Masking, Authentication mechanism, storage virtualization, and other security strategies, design a multi-storey access control strategy which is based on ATCA Unified Storage Platform, small of a storage block the access control equipment particles, and establish the multiple logic of access control group and zoning.Finally, the multi-access control strategy was tested based on Unified Storage Platform, by using LUN Masking to mask and discover the virtual block device, confirmed the multi-access control storey structure is feasible.