The Design And Implement Of Fiber Channel Storge Area Network Encryption Technology

With the banking, telecommunications, websites and other IT industry for the rapid growth of business needs of data storage and large-scale construction of data centers, storage area networks get more and more widely used, all information associated with our entire community began to be stored to a variety of storage media. The losing of data which tend to bring incalculable losses to the individuals, businesses, and even the whole society.Therefore, people began to realize the importance of "data storage security".With this problem is more and more people concern and attention, it also from a public widely concern about the hot issue gradually raised to a higher level.This paper designed a high-bandwidth, without limitation information systems storage network encryption system that is based on programmable logic chip based hardware platform, combined with FC storage networking technology system to achieve band width in the FC storage networking environments up to 8G storage data encryption protection.In this thesis, we first comb the development of storage technology, domestic and foreign research situation and development trend of the future, and clearly put forward to the high-speed FC store network encryption technology as the research direction. Then focuses on its implementation approach, design thinking and key technology, and proposed the specific design which combining AES algorithm to achieve the store encryption: the universal encryption algorithm applied to the store encryption, depending on storage characteristics to optimize the design, in accordance with XTS encryption mode to design the whole process of encryption, and through the actual environmental testing to verify the results of the research. Finally, the contents of the paper were analyzed, and the prospect the direction of the work should strive in the future.The high-speed FC storage network encryption system designed in this paper, to achieve the interface speed of up to 8G FC storage disk array storage network data encryption protection, reduce the storage device is lost resulting in the loss of data caused by the leak, to solve the problem of storing data security opened up a new road, it has great innovation in the similar products.First, because the functions of line access, protocol analysis and data encryption are based on the industry’s most advanced programmable logic devices, the Product has the characteristics of high integration and strong development. Second, according to the characteristics of disk encryption, the logical disk position of the data block combined with group encryption, to provide the variety of the entire encryption system. Third, adoption of new XTS mode for data encryption, which leads to the overhead of the entire encryption system less, no need to calculate the key expansion algorithm again, and no disclosure of key risk issues. In addition, the paper design and implementation of Fiber Channel protocol analysis technology to ensure the introduction of encryption system does not have any impact and change on information system, and even read and write data to the storage network performance will not have a significant impact, significantly enhance the adaptability and reliability of these products.