Method and equipment for controlling security level of storage system

Abstract

The invention provides a method and equipment for controlling security levels of a storage system. The method comprises the following steps: dividing the storage system into a plurality of security levels, setting a corresponding encryption suite matching with each security level, in response to a received request for accessing the storage system, obtaining a security level corresponding to the request, reading encryption suite configuration corresponding to the security level, and in response to receiving a verification password matching the encryption suite, permitting access of the storagesystem. Through the method, system security level flexible control can be realized, normal running of the service is guaranteed, the same set of storage system can meet various security level requirements of users, configuration content is simplified, lengthy processing is avoided, the problem that a user cannot directly modify a configuration file under the condition that the system does not allow direct modification of the configuration file is solved, unified and flexible control over various service safety of the storage system is achieved, and the problem that errors are likely to happenwhen the configuration file is directly and manually modified is avoided.

Description

technical field [0001] This field relates to the computer field, and more specifically relates to a method and device for controlling the security level of a storage system. Background technique [0002] The storage system provides various services, such as GUI, REST API, and CIM. Users or third-party clients access these services to operate and manage storage systems, etc. To ensure the security of the storage system, when users or third-party clients communicate with the storage system, the SSL protocol is used to securely encrypt the communication transmission process to prevent malicious attacks. The SSL protocol encrypts the transmission process through an encryption algorithm. These services on the storage system have their own cipher suite configuration items, which are used to define which encryption algorithms these storage services support, and provide an optional range for the selection of encryption algorithms in the subsequent exchange process between the clie...

AI Technical Summary

Problems solved by technology

[0005] In view of this, the purpose of the embodiment of the present invention is to propose a method for controlling the security level of the storage system, which can realize flexible control of the security level of the system, ensure the normal operation of services, and realize that the same set of storage systems can meet various security level requirements of users, and realize Simplify the processing of configuration content, avoid redundancy, solve the problem that users cannot directly modify configuration files in the scenario where the system does not allow direct modification of files, realize unified and flexible control of the security of various services in the storage system, and avoid possible errors in direct manual modification of configuration files The problem

Images