云服务环境下的密钥管理问题和挑战

发布时间：2018-01-10 07:41

本文关键词：云服务环境下的密钥管理问题和挑战　出处：《计算机科学》2017年03期 　论文类型：期刊论文

【摘要】：为了在云环境下安全地交互各种云数据服务,存储这些服务生成或处理的敏感性数据,云服务提供商应提供多种类型的安全加密机制。相比于传统IT环境,由于云用户和云服务供应商之间的所有权不同,各种云计算服务模式(基础设施即服务、平台即服务、软件即服务)在加密服务中产生了大量密钥,使得密钥的管理和使用变得更为复杂。明确了云环境中的密钥类型、可能的状态、基本的管理功能及通用安全要求,讨论了3种典型云服务模式中密钥管理安全功能的架构方案,并从密钥管理服务互操作性需求方面给出了密钥管理互操作相关应用系统的架构和功能设想。
[Abstract]:In order to safely interact with various cloud data services and store sensitive data generated or processed by these services, cloud service providers should provide various types of secure encryption mechanisms, compared with traditional IT environments. Because of the different ownership between cloud users and cloud service providers, various cloud computing service models (infrastructure as a service, platform as a service, software as a service) generate a large number of keys in the encryption service. It makes the management and use of keys more complicated. It clarifies the key types, possible states, basic management functions and common security requirements in the cloud environment. This paper discusses the architecture of key management security function in three typical cloud service modes, and presents the architecture and functional assumption of key management interoperability related application system from the point of view of key management service interoperability requirements.
【作者单位】：清华大学软件学院;
【基金】：国家科技支撑计划项目(2015BAH14F02)资助
【分类号】：TN918.4
【正文快照】： 到稿日期:2016-01-08返修日期:2016-07-09本文受国家科技支撑计划项目(2015BAH14F02)资助。1引言在云计算环境中,由于加密数据类型和处理过程相对复杂,数据的物理分布性和处理并行性使密钥及密码资源数据变得极为可观。此外,云服务中数据资源的物理和逻辑控制权又被各种云服务

【参考文献】