a way of key management in cloud storage based on trusted computing

ISCAS OpenIR

	a way of key management in cloud storage based on trusted computing
	Yang Xin; Shen Qingni; Yang Yahui; Qing Sihan
	2011
会议名称	8th IFIP International Conference on Network and Parallel Computing, NPC 2011
会议录名称	Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)
页码	135-145
会议日期	October 21
会议地点	Changsha, China
收录类别	EI
ISSN	0302-9743
ISBN	9783642244025
部门归属	(1) School of Software and Microelectronics Peking University Beijing China; (2) MoE Key Lab. of Network and Software Assurance Peking University Beijing China; (3) Network and Information Security Lab. Institute of Software Peking University Beijing China; (4) Institute of Software Chinese Academy of Sciences Beijing 100086 China
摘要	Cloud security has gained increasingly emphasis in the research community, with much focus primary concentrated on how to secure the operation system and virtual machine on which cloud system runs on. We take an alternative perspective to consider the problem of building a secure cloud storage service on top of a public cloud infrastructure where the service provider is not completely trusted by the customer. So, it is necessary to put cipher text into the public cloud. We describe an architecture based on Trusted Platform Module and the client of cloud storage system to help manage the symmetric keys used for encrypting data in the public cloud and the asymmetric keys used for encrypting symmetric keys. The key management mechanism includes how to store keys, how to backup keys, and how to share keys. Based on the HDFS (Hadoop Distributed File System), we put a way of key management into practice, and survey the benefits that such an infrastructure will provide to cloud users and providers, and we also survey the time cost it will bring to us. © 2011 IFIP International Federation for Information Processing.; Cloud security has gained increasingly emphasis in the research community, with much focus primary concentrated on how to secure the operation system and virtual machine on which cloud system runs on. We take an alternative perspective to consider the problem of building a secure cloud storage service on top of a public cloud infrastructure where the service provider is not completely trusted by the customer. So, it is necessary to put cipher text into the public cloud. We describe an architecture based on Trusted Platform Module and the client of cloud storage system to help manage the symmetric keys used for encrypting data in the public cloud and the asymmetric keys used for encrypting symmetric keys. The key management mechanism includes how to store keys, how to backup keys, and how to share keys. Based on the HDFS (Hadoop Distributed File System), we put a way of key management into practice, and survey the benefits that such an infrastructure will provide to cloud users and providers, and we also survey the time cost it will bring to us. © 2011 IFIP International Federation for Information Processing.
关键词	Cryptography Parallel Architectures Surveys
语种	英语
内容类型	会议论文
URI标识	http://ir.iscas.ac.cn/handle/311060/16193
专题	中国科学院软件研究所
推荐引用方式 GB/T 7714	Yang Xin,Shen Qingni,Yang Yahui,et al. a way of key management in cloud storage based on trusted computing[C],2011:135-145.