Message encryption device and method oriented to storage area network

Abstract

The invention relates to a message encryption unit applied in storage area networks and a method, which solves the problems of low I / O performance of a storage system caused by too high expense of communication message safety existing in the existing safe storage system. The invention adopts the technical proposal that: the message encryption unit which is applied in storage area networks comprises a message encryption module and a message decryption module, wherein, the message encryption module comprises a communication message analyzer, a message classifier and a message encipherer; the communication message analyzer is used for differentiating whether the interior of a data packet is messages or data; the message classifier is used for classifying messages, and a corresponding encipherer is selected according to the classification of each message; the message encipherer comprises at least two types of encipherers. The message decryption module comprises a communication message analyzer, a message classifier and a message decipherer; the communication message analyzer is used for differentiating whether the interior of a data packet is messages or data; the message classifier is used for classifying messages, and a corresponding decipherer is selected according to the classification of each message; the message decipherer comprises at least two types of decipherers corresponding to the encipherers, which uses different calculation methods to decipher the messages.

Description

technical field [0001] The invention is an efficient secure communication device and method between nodes in a storage area network, which is mainly used to solve the security problem of message communication among storage devices, hosts and metadata servers in a storage area network system, and belongs to storage technology and information security The cross-technical field, especially the field of safe storage system. Background technique [0002] The storage area network uses network connection technology to realize massive shared storage services. Since it is necessary to connect storage devices with a network, ensuring the security of communication is an important aspect of realizing a secure storage area network system. The communication information in the storage area network includes messages and data, and the sending and receiving process of communication information includes generating communication data, sending communication data, receiving communication data, ve...

AI Technical Summary

Problems solved by technology

[0011] The purpose of the present invention is to solve the problem of excessive communication message security overhead in the existing secure storage system, resulting in low I / O performance of the storage system, and to provide a fast message encryption device and method in a storage area network, reducing the number of storage area network System I / O performance loss

Images