文章介绍了基于对象存储的Lustre存储系统,指出了该存储系统在提供网络存储功能时存在的安全问题,针对存储系统的结构特点并基于椭圆曲线密码体制设计了相应的安全模型,通过提供双向身份认证、会话密钥协商和抵抗重放攻击安全功能,防止存储系统遭到身份冒充攻击,保证数据的传输安全,提高了存储系统的安全性。 This paper introduces the Luster storage system based on object storage, points out the security problems of the storage system in providing network storage function, designs the corresponding security model based on the structural characteristics of the storage system and the elliptic curve cryptosystem, Authentication, session key negotiation, and replay attack security to prevent the storage system from being attacked by identity, ensuring the security of data transmission and improving the security of the storage system.