安全存储认证子系统的研究与实现

开放式环境下，敏感数据的存储与传输很容易受到窃听、非授权访问、恶意修改等攻击。通过分析安全存储系统的研究现状，在给出一种开放环境下有效抵抗各种攻击的安全存储系统HermitFS框架的基础上，设计并实现了一种认证子系统，利用强加密算法与安全协议，从数据写入到授权访问过程提供安全保护。实验与安全分析表明该安全子系统的设计能在开放式环境下防止未授权访问，并达到较小的存储开销与可接受的性能。

Research and Implementation of Authentication Sub system in Secure Storage

In an opening environment, the storage and transformation of sensitive data often suffered from wire tapping, nonauthenticate access and other attack. The paper presented a type of secure storage architecture named HennitFS. Based on it, an authentication sub-system was proposed using enhanced encrypt algorithm and secure protocol. The experiment show that the authentication sub-system made the whole secure storage more secure.