iOBS3: An iSCSI-based object storage security system

Abstract

With the growing importance of data, networked storage of high performance and strong security has become a hotspot of research. Aiming at the goals, an iSCSI-based object storage security system (iOBS3) adopting OSD command sets has been proposed in this paper. Firstly, incurring to the block I/O channel of iSCSI and the security method within OSD, iOBS3 can achieve high-speed bandwidth of block I/O and access control capability of object I/O; secondly, iOBS3 enhances its transfer security by employing IPSec at IP layer or SSL above TCP layer; thirdly, iOBS3 greatly improves the I/O speed using zero-copy TCP at initiator-side. The experimental results indicate iOBS3 can achieve high throughput, in the meantime guaranteeing both the transmission and storage security. © Springer-Verlag Berlin Heidelberg 2007.