集群存储系统数据安全研究*

借鉴P2P的思想实现了一个基于集群的安全存储系统，并介绍了构建在该存储体系结构之上的一种数据安全存取方案。引入基于共享鉴别密钥的鉴别机制，以确保用户数据的授权访问，防止未授权用户的阅读和修改。系统采用广泛用于加/解密技术中的SHA1算法作为密码校验函数，与采用数字签名鉴别机制相比，该算法具有较高的性能。初步分析和实验表明,该系统在现实条件下,在消耗较低的维护带宽的同时维持了较高的可靠性，并提供了较好的读写性能。

Research on data security of cluster based storage system

Referencing to P2P idea, a secure reliable storage system was proposed. And based on the storage system architecture, a data security access scheme was presented. The shared key authentication mechanism was introduced to ensure that data was written and read only by authorized users. The key verifying function was defined by the SHA 1 algorithm which was widely used in encryption and decryption techniques. Comparing with the data signature mechanism, this algorithm has better performance. Preliminary analysis and experiments demonstrate that it maintains a high reliability and read/write performance in real settings while keeping the cost of maintenance bandwidth low.