【作者】 赵俊杰；

【导师】 詹永照；

【作者基本信息】 江苏大学 ， 计算机应用技术， 2006， 硕士

【摘要】 应用系统对海量存储技术的要求越来越高，经典的基于块访问接口的SAN和基于文件访问接口的NAS系统已力不从心，而新出现的基于对象接口的网络存储技术以高性能、高可扩展性、易管理和跨平台共享等多种性能受到越来越多应用场合的欢迎。然而，当前应用对存储网络的安全性提出了更高要求，已有的基于对象接口的网络存储系统仅仅提供了对象属性访问控制的安全机制，未能从系统的角度考虑其整体的安全性。 本文在深入研究和分析了基于对象接口的网络存储技术之后，发现它面临的安全性问题及其它能够提供的安全机制，为此提出了一种新的面向对象存储系统安全模型，从系统的角度为网络存储系统的整体安全问题提供了一揽子解决方案，并在开放源码的对象存储文件系统Lustre上实现了该模型并对其相关性能进行了测试和比较。主要工作如下： (1)通过网络存储技术产生背景、发展现状及安全需求等的分析和研究，指出了网络存储安全研究的必要性；分析了网络存储安全研究现状，指出了其面临的问题和需要进一步研究的内容。 (2)提出了面向对象存储系统安全模型，并设计了相关的安全协议。针对对象存储的体系结构特点和其所可能遭受的安全威胁，对基于该模型协议进行了安全性分析；在此基础上，对存储模型的安全性进行了定性分析；通过与相关工作的比较，说明了该模型具有较强的安全性。 (3)提出了适用于对象存储系统的轻量级多变密钥对象文件加密算法。该算法是异或运算的加解密，采用伪随机数的方法产生密钥序列，保证异或运算密钥的一次一密钥，从而满足快速加解密和较高的安全性要求，非常适用于对象存储系统。 (4)利用开放源码的对象存储文件系统Lustre，在实验室环境中实现了基于对象接口的网络存储原型系统；在该原型系统上实现了本文提出的安全模型及相关协议，并对其相关性能进行了测试和比较分析。更多还原

【Abstract】 The requirements for mass storage technology become more and more high by the application system. The classical storage system, such as block based SAN and file based NAS, has lacked the ability to do what they would like. But the new advent of the network storage technology accessed based on object receive more and more welcome from many applications, for its high performance、 high scalability, being easy to manage and cross platform sharing. However, the current applications propose a higher request to the security of the network storage. The object-based storage storage has only provided the access control mechanism based on object attribute merely, and has not been able to consider its whole security from the system angle.Analyzing the network storage technology based on object deeply,we find the existing secure question and secure mechanisms it can provide. So we proposed a new kind of security model for object-based storage system, which provids the wholesale solution for the overall security problem of network storage system from the system angle. The model is implemented in lustre filesystem which is an opening source code. Then we test the model and make comparison. Main work as follows:(1) Researching and analyzing the background 、 the present development situation and the security requirements of the network storage technology, We point out the necessity of research. Analyzing the recent research situation of storage security, we points out the existing problems and the questions needed to be studied furtherly.(2) Security model for object-based storage system is been proposed, and associated secure protocols is designed. Aiming at architecture feature of the object-based storage system and the safety threat it will probably suffer, we analyze the safeness of the protocols. And then we make the qualitative analysis on the security model. Through comparing with the correlated work, the results show that this model has advantages over others of the strong security.(3) A lightweight changeable key object file encryption algorithm, suitable for更多还原