Methods and apparatus for security over fibre channel

A system for authenticating network entities in a fibre channel network, comprising:

• means for receiving a fibre channel authentication message from a first network entity at a second network entity in a fibre channel network, wherein the authentication message provides information for authenticating or reauthenticating the first network entity in the fibre channel network;
• means for determining that both the first network entity and the second network entity support security, wherein determining that both the first and second network entities support security comprises identifying a security enable parameter in the initialization message;
• and
• means for transmitting an acknowledgment that includes a salt parameter to the first network entity, the acknowledgment indicating that the second network entity has authentication capability or supports other security functions
• means for receiving a fibre channel frame at the second network entity from the first network entity;
• and
• means for identifying a security control indicator in the fibre channel frame from the first network entity, wherein the security control indicator is used to determine if the fibre channel frame is encrypted or authenticated.

An apparatus, comprising:

• a processor;
• and
• a memory, at least one of the processor or the memory being configured to:
• receive a fibre channel authentication message from a first network entity at a second network entity in a fibre channel network, wherein the authentication message provides information for authenticating or reauthenticating the first network entity in the fibre channel network;
• determine that both the first network entity and the second network entity support security, wherein determining that both the first and second network entities support security comprises identifying a security enable parameter in the initialization message;
• and
• transmit an acknowledgment that includes a salt parameter to the first network entity, the acknowledgment indicating that the second network entity has authentication capability or supports other security functions
• receive a fibre channel frame at the second network entity from the first network entity;
• and
• identify a security control indicator in the fibre channel frame from the first network entity, wherein the security control indicator is used to determine if the fibre channel frame is encrypted or authenticated.