基于选择的存储区域网消息加密策略

存储区域网系统中存在大量的消息通信,使用传统对全部消息加密的策略会带来较大的开销,严重影响系统性能.提出了基于选择的消息加密策略,在分析存储区域网中消息构成的基础上,提出了消息分类算法和选择性加密算法,使用不同加密算法加密消息中的不同部分,降低安全系统的开销;提出了可变周期的密钥更新策略,动态优化安全系统的性能.并在开源存储区域网系统Lustre上实现了原型系统,测试了系统的读写性能,通过与对所有消息加密原型系统的比较,验证了基于选择的消息加密策略具有明显的效率优势,给存储区域网系统带来的性能下降在10%～20%之间,与对所有消息加密所带来的20%～30%的性能下降相比,基于选择的消息加密策略在保证消息安全性的同时,具有明显的效率优势.

Cryptographic algorithm of message in storage area network based on selective

There is a large amount of communication messages in storage area network. Using traditional cryptographic strategy to encrypt all the messages will seriously affect the performance of the system. A selective cryptographic strategy of messages in storage area network is proposed. On the basis of analyzing the message's structure in storage area network, the classifying algorithm of message and the se- lective cryptographic algorithm are introduced, and they are used to encrypt different parts of message wit...