本文已被:浏览次 下载次 |
码上扫一扫! |
|
|
Security model design for Lustre based on PKI |
LIU Su-qin, LI Xing-sheng, SHUO Jun, WANG Jing
|
(College of Computer and Communication Engineering in Chirm University of Petroleum,Qingdao 266555,Chirm)
|
Abstract: |
By analyzing safety loophole and storage characteristic of Lustre file system, a security model for Lustre file system was designed based on public key infrastructure (PKI) security mechanism. The model includes certificate management and client accessing. Certificate management mechanism of PKI is adopted in certificate management module. Bidirectional identity authentication and digital signature are applied in client accessing module. Random number must be checked during authentication. Dissymmetrical encryption mechanism is applied to the transmission of request information End authentication information. Symmetrical encryption mechanism is applied to the transmission of data stream The security model can remove safety loopholes in Lustre file system, such as imitating identity, filching data, distorting data and replaying attack. It can enhance the security of Lustre file system. |
Key words: PKI (public key infrastructure) Lustre security model bidirectional identity authentication digital signature |
|
|