- 學位論文
基於Ceph軟體定義分散式儲存架構設計私有區塊鏈之儲存優化
The Design of Storage Optimization for Private Blockchain based on Ceph SDS Architecture
摘要
區塊鏈是一個去中心化分散式的多節點架構，主要透過整個區塊鏈網路的所有節點共同維護一份帳本，當這份帳本有資料更改的請求時，各個節點會共同對該請求進行驗證。而帳本則是由多個區塊組合而成，當新的區塊產生時，會包含上個區塊內容的Hash值，透過這種方式將區塊與區塊之間進行串接，因此具備了不可逆與不可竄改特性，擁有相當程度的安全性。但在資料安全的定義中，除了需要預防資料被竄改的風險之外，資料無法被竊取也相當重要，其影響了交易內容的隱私性，而在區塊鏈中雖然徹底防止了資料無法被竄改，但是在區塊中的交易因為是由各個節點共同維護的，所以任何人都可以取得交易內容，這就無法達成交易內容的隱私性，因此，本研究使用開源區塊鏈技術Ethereum設計私有區塊鏈服務，並使用容器叢集調度技術(Kubernetes)搭建該區塊鏈環境實現一套企業區塊鏈即服務之架構，其透過容器儲存介面(Container Storage Interface，CSI)串接分散式軟體定義儲存系統(Ceph)作為底層儲存環境，再使用此Ceph 儲存服務進一步分析與設計來加密儲存系統提供Trustzone的概念，進而設計出一套可由區塊鏈節點決定是否將儲存至加密區塊的機制，以實現更佳的隱私性。
並列摘要
Blockchain is a decentralized multi-mode architecture. All nodes which are made by the entire Blockchain network jointly maintains a ledger. When this ledger has a request for a data change, each node will jointly verify the request. The ledger is composed of several blocks. When a new block is generated, it will contain the hash value of the previous block content. In this way, the block and the block are concatenated, so it has irreversible and tamper-proof nature, and has a considerable degree of security. However, in the definition of data security, in addition to the risk of preventing data from being tampered with, it is also important that the data cannot be stolen, which affects the privacy of the transaction content. Even if Blockchain completely prevents the data, which is not tampered with, the privacy of the transaction content cannot be achieved. Hence, it is possible to get the transaction content from some node because the transaction in the blocks are stored at each node. Consequently, the study will use Blockchain technology, Ethereum, to design private Blockchain services and use Kubernetes providing container cluster management to build containerized Blockchain environment to achieve a set of enterprise Blockchain as a service (BaaS) architecture. In addition, the proposed BaaS architecure links Ceph distributed software defined storage system (SDS) as backend storage environment by Container Storage Interface (CSI). And, through CSI, this study proposes to use the Ceph storage service to further design the way to encrypt the storage system, which provides a concept of TrustZone. In order to achieve better privacy, the proposed design provides a mechanism which is determined by the Blockchain node whether the data will be stored to TrustZone.