可信多云协作关键安全问题研究

项目名称： 可信多云协作关键安全问题研究

项目编号： No.61502044

项目类型： 青年科学基金项目

立项/批准年度： 2016

项目学科： 自动化技术、计算机技术

项目作者： 金正平

作者单位： 北京邮电大学

项目金额： 20万元

中文摘要： 随着云服务技术的深入发展和广泛应用，多云协作模式，即不同云服务提供商通过相互协作的方式将多个云服务整合为一个云服务进行应用，成为近年来的发展趋势。其中，由于云服务的多样性及提供商的动态性，在无需事先建立协议和专用工具的情况下，如何安全地实现不同云服务提供商间机会式相互协作，已经成为当前多云服务发展的迫切需求。.本课题拟从多云协作中的信任问题出发，在改进和完善多云协作信任机制的基础上，致力于研究多云协作中基于信誉的数据加密、动态数据完整性验证以及兼顾机密性和隐私性的安全查询等关键安全技术，构建一套可信的多云协作安全机制，进而有助解决这种无需事先建立协议和专门工具的多云协作模式中出现的新的安全问题。.本课题的研究成果，预期建立一个安全可信的多云协作运行模式，进一步推动可信多云协作安全技术的基础性研究，为今后的实际应用提供相应的理论支持，具有重要的理论意义和应用价值。

中文关键词： 信任机制；多云协作；基于信誉的加密；完整性认证；安全查询

英文摘要： With further development and wide application of cloud services, collaboration in multi-cloud computing is a recent trend, where services from multiple clouds are collaboratively combined into a single service. For the diversity of cloud-based services and the dynamic characteristic of cloud providers in multi-cloud collaboration, it is currently an urgent demand to develop mechanisms that allow opportunistic collaboration among services without pre-established agreements or proprietary tools. .In this research, focusing on the trust problem, the trust mechanism for collaboration in multi-cloud will be improved and perfected, and some key security technologies, such as trust-based encryption, integrity verification for dynamic data and secure query with both confidentiality and privacy, will be studied, so as to build a security mechanism for trusted multi-cloud collaboration. Thus, it helps to solve new security problems during such collaboration in multi-cloud computing, where neither pre-established agreement nor proprietary tool is needed..The results of this research are expected to build a safe and reliable multi-cloud collaborative operation mode, further promote the basic research on key security technologies in trusted multi-cloud collaboration, and provide some theoretical support for possible applications in future, which has important theoretical and practical significance.

英文关键词： Trust mechanism;Collaboration in multi-cloud computing;Trust-based encryption;Integrity verification;Secure query