iSCSI-SAN分级管理结构及其访问控制模型设计

介绍了基于iscsi（Internet小计算机系统接口）协议构建存储区域网的网络存储技术，分析了iSCSI—SAN（存储区域网）的通信机制和管理结构，针对典型的集中式管理结构存在的管理服务器瓶颈、单点故障和管理复杂的不足提出了iSCSI—SAN分级管理结构，通过将存储的管理工作逐级授权简化了管理工作，并能有效地解决服务器瓶颈和单点故障问题，最后根据结构特点给出了一种基于权限证书的访问控制解决方案，防止合法用户对存储数据的越权访问和未授权用户的非法访问，提高了系统的安全性。

Structure of iSCSI-SAN with Graded Management and Its Access Control Model Design

This paper introduces the network storage technology of constructing storage area network based on iSCSI protocol, and analyzes mechanisms and management structure of iSCSI-SAN, aiming at flaws of manage server＇s bottle-neck, single point invalidation of server and complex management exited in the one server manage structure, a structure of iSCSI-SAN with graded management is proposed, which can solves the abovementioned problem. At last, this paper gives a store method of access control based on Digital Certificate, it can prevent improve the system security.