San Storage Encryption Research And Prototype Realization

With the computer and network technology development, more and more information is made into data, the data should be saved in storage devices for long time and could be searched quickly and easily, so the data storage capacity and speed are desired. A disk of a computer can not meet the request, so we need network storage space. The popularization of electronic business and government affairs require higher network security. DAS and NAS are both storage technologies, which have their own characteristics and application scenes. SAN is more efficient and applied in data center of corporation information system.The design of storage encryption device is applied in FC-SAN, which dedicate to protect static data stored in disks or tapes. The encryption device lies before storage devices, which data goes through will be pazed and the data type frame will be encrypted or decrypted. The encryption arithmetic is AES-256, which the key longth of is 256 bits. The counter of AES counts the loads of data frame, whose result add the plaintext produces the ciphertext. decryption process is similar.The encryption device mainly work on FCP layer 1 and layer 2. On layer 1, the device processs some order sets and link conditions. On layer 2, the device splits frame and picks up some fields for parse or encryption. After encryption, the frame need a new CRC, a right CRC for a right frame and a false CRC for a false frame. Then, a approprate EOF append to the frame based on the RD value. At last, reassemble the frame and send out from the encryption device.