雲端運算資料共享之安全防護研究

近年來雲端運算(Cloud Computing)蓬勃發展，也提升了應用程式的部署速度、促進創新和降低成本，同時增強企業經營的敏捷性。隨著雲端服務應用的擴展，雲端運算的安全問題也將逐漸顯現。近年來雲端運算技術的發展較注重於基礎的建設與服務的提供，在資料安全方面並不是那麼完善，然而在雲端硬碟上的資料共享上大多都是沒有加密的，造成駭客輕易竊取或誘騙使用者獲取其帳號與密碼進而得到私密資料，使重要的資訊外洩。因此，本研究提出雲端運算共享資料安全機制，目前可能面臨的安全問題及各種網路攻擊可能造成雲端運算資料共享時的威脅，並在雲端運算上的資料分享階段使用了行動一次性密碼(Mobile One-Time Password; MOTP)驗證和加密模組系統並把資料作等級分類，來達到避免各種網路攻擊威脅，並提高資料的安全性。

關鍵字

雲端運算；資料安全；共享資料安全機制；行動一次性密碼；加密模組

並列摘要

In recent years, cloud computing promises to increase the velocity with which applications are deployed, increase innovation, and lower costs, all while increasing business agility. To follow expansion of cloud computing application services, the security problems of cloud computing will be appeared gradually. Recently, the development of cloud computing technology focuses on the infrastructure and service providing and in terms of data security is not perfect. Nevertheless, the data sharing on the cloud hard disk are not encrypted mostly, easily causing hackers to steal or trick users to obtain user’s account & passwords and then get private data. Therefore, this study presents a data sharing security mechanism for cloud computing to solve the currently facing security problems and a variety of network attacks, bring about the threat of data sharing. The data sharing phase in the cloud computing uses a mobile one-time password (MOTP) to authenticate, encryption modules to protect data, and classify information to the three level of security. It achieves improving the security of the data and preventing a variety of network attacks and threats.