The Centrifuge of Cloud Service: Separated Cryptographic and Ciphered-storage Services

Zheng-Yun Zhuang ； Yi-Chang Hsu ； Hsing-Hua Liu ； Chien-Hsing Wu

《資訊安全通訊》 22卷4期 (2016/10) Pp. 39-64

並列摘要

This study proposes a business model to provision a security-enabled cloud via splitting cryptographic and cipher-storage sub-services off from the main cloud service, being independently operated by other SPs. The security/privacy enhancements of the model over the existing approaches are proved progressively but cogently. As such, the model can alleviate the improper user data disclosure risk, raise the privacy preservation of sensitive user information and therefore, mitigate the two information-leaking threats. The interoperability (among the centrifuged services) and migration issues (i.e., seamless system transferring and SLA amending) are illustrated and studied by using the extremely security-sensitive e-banking cloud service example.

並列關鍵字

service operation risk management ； security service and privacy ； distributed cloud systems organizing principle ； database and storage security ； management and querying of encrypted data ； cryptography and key management

參考文獻

Ajili, A.,Salehi, S.,Rezaei-Moghaddam, K.,Hayati, D.,Karbalaee, F.(2012).Estimating the model of investigating attitude and intention in the usage of variable rate irrigation technology.American Journal of Experimental Agriculture.2(3),542-556.

Baker, M.,Buyya, R.,Laforenza,D.(2002).Grids and grid technologies for wide-Area distributed computing.Software: Practice and Experience.32(15),1437-1466.

Buyya, R.,Yeo, C.S.,Venugopal, S.,Broberg, J.,Brandic, I.(2008).Cloud computing and emerging IT platforms: vision, hype and reality for delivering computing as the 5th utility.Future Generation Computer Systems.25(6),599-616.

Carr, N. G.(2003).IT doesn't matter.Harvard Business Review.81(5),41-49.

Chen, P.(1976).The entity-relationship model - Toward a unified view of data.ACM Transactions on Database Systems.1(1),9-36.