A Trustworthy and Computationally Efficient Cloud Service Contract System via Cloud Notary Authorities
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Recording and keeping account of the usage of cloud resources in a trustworthy way are vital requirement for widespread cloud deployment and availability. To provide a trustworthiness of cloud service contracts, we identified that the frequent cryptographic operations for the trustworthy contracts lead to excessive computations and a bottleneck of contract transactions. As a remedy for these limitations, we propose a trustworthy contract system for cloud computing environment. The system, which introduces the concept of a Cloud Notary Authority (CNA) for the supervision of contract, makes contract more objective and acceptable to users and cloud service providers. CNA generates trustworthy binding information that can be used to resolve future disputes between a user and a cloud service provider. Because our contract system drastically minimizes the asymmetric key operations of cloud users and service providers, it provides a level of security that is identical to that of a Public Key Infrastructure (PKI) and it minimizes the latency of contract transactions. This work was undertaken on a real cloud computing service called iCubeCloud.
Abstract
Recording and keeping account of the usage of cloud resources in a trustworthy way are vital requirement for widespread cloud deployment and availability. To provide a trustworthiness of cloud service contracts, we identified that the frequent cryptographic operations for the trustworthy contracts lead to excessive computations and a bottleneck of contract transactions. As a remedy for these limitations, we propose a trustworthy contract system for cloud computing environment. The system, which introduces the concept of a Cloud Notary Authority (CNA) for the supervision of contract, makes contract more objective and acceptable to users and cloud service providers. CNA generates trustworthy binding information that can be used to resolve future disputes between a user and a cloud service provider. Because our contract system drastically minimizes the asymmetric key operations of cloud users and service providers, it provides a level of security that is identical to that of a Public Key Infrastructure (PKI) and it minimizes the latency of contract transactions. This work was undertaken on a real cloud computing service called iCubeCloud.
참고문헌 (28)
- Ristenpart T., "Hey, you, get off of my cloud: exploring information leakage in third-party compute clouds", 16th ACM Conference on Computer and Communication Security (CCS) (2009)
- H.-Y. Lin, "Authentication protocols with non-repudiation services in personal communication system", IEEE Communications Letters, 3(8) (1999)
- "Microsoft, Windows Azure Platform"[URL]
- Buyya R, "Economic models for resource management and scheduling in Grid computing", Concurrency and Computation: Practice and Experience, 14(13), pp.1507~1542 (2002)
- Market-based proportional resource sharing for clusters, "Chun BN", Computer Science Division, UC at Berkeley, ~, pp.Technical Report CSD- 1092, (2000)
- R Byrom, "APEL: An implementation of Grid accounting using R-GMA, et al", 2005 UK e-Science All Hands Meeting, ~ (2005)
- M. Litzkow, "Condor: A hunter of idle workstations", 8th Int. Conf. Distributed Computing Systems (ICDCS 1988) (1988)
- Buyya R, "Nimrod", G: An architecture for a resource management and scheduling system in a global Computational Grid, 2000, ~
- Kwon, O, "GRASP: A Grid Resource Allocation System based on OGSA", Proc. of the 13th IEEE international Symposium on High Performance Distributed Computing (2004)
- IBM, "Tivoli: Usage and Accounting Manager", IBM Press
- Guarise, A, "DataGrid Accounting System - Architecture" (2003), EU DataGrid
- P. Gardfj¨all, "Scalable grid-wide capacity allocation with the SweGrid Accounting System (SGAS)", Concurrency Computat.: Pract. Exper, 20(18), pp.2089~2122 (2008)
- A. Barmouta, "GridBank: A Grid Accounting Services Architecture (GASA) for Distributed Systems Sharing and Integration", Proceedings of the 17th IEEE IPDPS 2003, pp.22~26 (2003)
- "Amazon Elastic Compute Cloud (EC2) and Simple Storage Service (S3)"[URL]
- Thompson, M, "Certificate-based access control for widely distributed resources", Proceedings of the 8th Conference on USENIX Security Symposium
- A. Herzberg, "Mini-pay: charging per click on the web", 6th World Wide Web Conference, Santa Clara (1997)
- "Public Key Infrastructure"[URL]
- R. Rivest, "PayWord and MicroMint: two simple micropayment schemes", 1996 International Workshop on Security Protocols, Lecture Notes in Computer Science, 1189, pp.69~87, Springer
- V. Patil, "An efficient, secure and delegable micro-payment system", 2004 IEEE International Conference on e-Technology, e- Commerce and e-Service, Taipei, Taiwan, pp.28~31 (2004)
- J. Jonsson, "Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1", Network Group, ~
- E. Roberts, "TeraGrid User Portal: An Integrated Interface for TeraGrid User Information and Services" (2008), TeraGrid
- D.Banks, "Towards Cloud-based Collaboration Services", Usenix Workshop HotCloud (2009)
- N.Santos, "Towards Trusted Cloud Computing", Usenix Workshop HotCloud (2009)
- Dai, X., "NetPay: an off-line, decentralized micro-payment system for thin-client applications", E-Commerce Research and Applications, 6, pp.91~101 (2007)
- Park, K, "Computationally efficient PKI-Based single sign-on protocol PKASSO for mobile devices", IEEE TRANSACTIONS ON COMPUTERS, 57(6), pp.821~834 (2008), IEEE COMPUTER SOC
- "iCube Cloud Computing and Elastic- Storage Service"[URL]
- Park, K., "THEMIS: Towards Mutually Verifiable Billing Transactions in Cloud Computing Environment", Proc. of the 3rd IEEE Intl. Conf. on CLOUD, 5(10), pp.139~147 (2010)
- J. Ainsworth, "Resource Usage Service (RUS) based on WS-I Basic Profile 1.0", Draft specification: draft-ggfwsi-rus-17, ~ (2006)