Diffie-Hellman protocol-based iSCSI protocol security enhancement method

The invention discloses a Diffie-Hellman protocol-based iSCSI protocol security enhancement method. The method comprises the steps that an originating terminal sends a public key certificate, a request and a digital signature of the originating terminal to an authentication server; the authentication server authenticates the identity of the originating terminal and authorizes the request; the authentication server sends both a ciphertext and a public part of the certificate to the originating terminal of the request, wherein the ciphertext is obtained by encrypting a private part of the certificate by a public key of the originating terminal; the originating terminal calculates a message verification code and sends both the message verification code and the public part of the certificate to a designated target terminal; the target terminal receives the verification code and the public part of the certificate and then authorizes the request of the originating terminal; the target terminal responds to the reque