The Centrifuge of Cloud Service: Separated Cryptographic and Ciphered-storage Services

Zheng-Yun Zhuang ； Yi-Chang Hsu ； Hsing-Hua Liu ； Chien-Hsing Wu

《資訊安全通訊》 22卷4期 (2016/10) Pp. 39-64

並列摘要

This study proposes a business model to provision a security-enabled cloud via splitting cryptographic and cipher-storage sub-services off from the main cloud service, being independently operated by other SPs. The security/privacy enhancements of the model over the existing approaches are proved progressively but cogently. As such, the model can alleviate the improper user data disclosure risk, raise the privacy preservation of sensitive user information and therefore, mitigate the two information-leaking threats. The interoperability (among the centrifuged services) and migration issues (i.e., seamless system transferring and SLA amending) are illustrated and studied by using the extremely security-sensitive e-banking cloud service example.

並列關鍵字

service operation risk management ； security service and privacy ； distributed cloud systems organizing principle ； database and storage security ； management and querying of encrypted data ； cryptography and key management

參考文獻

P. McFedries, "The Cloud is the Computer," IEEE Spectrum, Online Electronic Magazine, http://spectrum.ieee.org/computing/hardware/the-cloud-is-the-computer, (2008).

(RSA Laboratories, "PKCS #11 V2.3 Cryptographic token interface standard," RSA Security Inc. Publication, 2009).

Salesforce.com Inc., "Force.com platform,"http://www.salesforce.com/tw/ (2010)

SAP AG, "SAP services: maximize your success,"http://www.sap.com/services/index.epx (2010)

Ajili, A.,Salehi, S.,Rezaei-Moghaddam, K.,Hayati, D.,Karbalaee, F.(2012).Estimating the model of investigating attitude and intention in the usage of variable rate irrigation technology.American Journal of Experimental Agriculture.2(3),542-556.