Disk array storage encryption system and method

Abstract

The invention provides a disk array storage encryption system, which comprises a user authentication program, an initiator side, a target side and a plurality of SATA hard disk password modules, wherein the user authentication program provides authentication service for users in a local area network and receives user operation information; the initiator side is used for sealing up user information in an SCSI (Small Computer System Interface) command for transmission; the target side is used for receiving the SCSI command and continuously transferring the SCSI command; and the plurality of SATA hard disk password modules carry out an encryption and decryption operation on data which is written into and read out of a hard disk. The invention also provides a disk array storage encryption method. The method comprises the following steps that: a user initiates an authentication request through the user authentication program installed in the initiator side; after the authentication is qualified, the initiator side seals up the user information in the SCSI command and transfers the SCSI command to the target side; the target side reduces the SCSI command and transmits the SCSI command to an encryption module; the password modules analyze the user information in the SCSI command, generate the information into a data encryption key and carry out a corresponding encryption and decryption operation. Therefore, each user which passes through the system has one set of password resources which can not be cracked by other people, and the safety of user data is greatly guaranteed.

Description

technical field [0001] The invention belongs to the technical field of data security, and in particular relates to a disk array storage encryption system and method. Background technique [0002] With the increasing application of disk array storage encryption system products in the field of data security storage, disk array storage encryption system products have put forward higher and higher security requirements. However, most of the current disk array storage encryption system products use cipher machines. To allocate a set of password resources for each user, and not to allocate an encryption unit for each hard disk. Therefore, it is impossible to achieve safe isolation between users and between hard disks, thereby threatening the data security of users. Therefore, it is very necessary to provide a disk array storage encryption system and method. Contents of the invention [0003] The purpose of the present invention is to solve the problems in the above-mentioned p...

AI Technical Summary

Problems solved by technology

[0003] The purpose of the present invention is to solve the problems in the above-mentioned prior art that a set of password resources cannot be allocated to each user, an encryption unit cannot be allocated to each hard disk, security isolation between individuals cannot be performed, and data security is threatened, etc., and provides a Disk array storage encryption system and method

Images