Design for a Decentralized Security System For Network Attached Storage

T This paper describes an architecture for a secure file system based on network-attached storage that guarantees end-to-end encryption for all user data. We describe the design of this system, focusing on the features that allow it to ensure that data is written and read only by authorized users, even in the face of attacks such as network snooping and physically capturing the storage media. Our work shows that such a system is feasible given the speeds of today's microprocessors, and we discuss benchmark results using several popular encryption and authentication algorithms that could be used on storage devices in such a system. Based on these calculations, we present the overall performance of the system, showing that it is nearly as fast as the non-encrypted file systems in wide use today.

• Type: Conference
• Year: 2000
• Where: MSS
• Authors: William E. Freeman, Ethan L. Miller
• Keywords: End-to-end Encryption, File Systems, Hardware, MSS 2000, Network-attached Storage