Security in Storage Workshop, International IEEE (2005)
San Francisco, California
Dec. 13, 2005 to Dec. 13, 2005
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SISW.2005.12
Michael Factor , IBM Haifa Research Lab, Israel
David Nagle , Panasas, USA
Dalit Naor , IBM Haifa Research Lab, Israel
Erik Riedel , Seagate Research, USA
Julian Satran , IBM Haifa Research Lab, Israel
The ANSI T10 Object-based Storage Devices (OSD) Standard is a new standard. It evolves the storage interface from fixed size blocks to variable size objects and includes an integrated security protocol that protects storage. This paper presents the requirements, the design tradeoffs, and the final security protocol as defined in the standard. The resulting protocol is based on a secure capability-based model, enabling fine-grained access control that protects both the entire storage device and individual objects from unauthorized access. The protocol defines three methods of security based on the applications? requirements. Furthermore, the protocol?s key management algorithm allows keys to be changed quickly, without disrupting normal operations. Finally, the protocol is currently being enhanced for version 2.0 of the ANSI T10 OSD standard; future extensions will include data-encryption and access-control on sections of storage objects.
D. Nagle, E. Riedel, M. Factor, D. Naor and J. Satran, "The OSD Security Protocol," Proceedings. Third International IEEE Security in Storage Workshop(SISW), San Francisco, CA, 2005, pp. 29-39.