멀티클라우드 환경에서 사용자에게서비스의 투명성을 제공하는 인증 기법
An Authentication Scheme for Providing to User Service Transparency in Multicloud Environment
1
조회
0
다운로드
7
인용
0
참고문헌
키워드
초록
클라우드 컴퓨팅 모델은 대부분이 단일 서버 모델로 가용성, 내부자 공격, vendor lock-in 등의 해결하기 어려운문제점을 가지고 있다. 이를 해결하기 위해 최근 멀티클라우드 모델에 관한 연구가 진행되고 있다. 멀티클라우드 모델은 기존 클라우드 모델의 단점을 보완하고, 새로운 서비스를 제공할 수 있는 장점이 있다. 본 논문에서는 멀티클라우드 모델에서 발생하는 사용자 인증 문제에 초점을 맞추고 이를 해결하기 위한 기법을 제안한다. 클라우드 브로커 기반의 멀티클라우드 모델을 정의하고, 여기에 적용할 수 있는 인증 프로토콜을 제안하였다. 제안한 프로토콜은 사용자에게 서비스의 투명성을 제공하고, 서비스 제공자의 위장 공격을 방지할 수 있다.
Abstract
Most of the single server model of cloud computing services have problems that are hard to solve, such as a serviceavailability, insider attack, and vendor lock-in, etc. To solve these problems, the research about multicloud has emerged. Multicloud model can supplement previous cloud model‘s weakness and provides new services to user. In this paper, we focuson a user authentication problem in multicloud model and propose a scheme to resolve it. We define a cloud broker-basedmulticloud model. And we propose an authentication protocol that is applicable at presented model. The proposed scheme canprovide service transparency to user and prevent an impersonation attack by service provider.
참고문헌 (16)
- M. Jensen, "On Technical Security Issues in Cloud Computing", IEEE International Conference on Cloud Computing, pp.109~116 (2009)
- S. Subashini, "A Survey on Security Issues in Service Delivery Models of Cloud Computing", Journal of network and Computer Applications, 34(1), pp.1~11 (2011)
- J. S. Babu, "Migration from Single-Cloud to Multi-Cloud Computing", International Journal of Engineering Research & Technology, 2(4), pp.1218~1225 (2013)
- S. Sundararajan, "Preventing Insider Attacks in the Cloud", Advances in Computing and Communications, 190, pp.488~500 (2011), Springer Berlin Heidelberg
- B. Satzger, "Winds of Change: From Vendor Lock-In to the Meta Cloud", IEEE Internet Computing, 17(1), pp.69~73 (2013)
- B. Rochwerger, "Reservoir – When One Cloud Is Not Enough", IEEE Computer, 44(3), pp.44~51 (2011)
- M. A. AlZain, "Cloud Computing Security: From Single to Multi-Clouds", 45th Hawaii International Conference on System Sciences (HICSS), pp.5490~5499 (2012)
- B. Zwateendorfer, "Secure Cross-Cloud Single Sign-On (SSO) using eIDs", International Conference for Internet Technology and Secured Transactions, pp.150~155 (2012)
- F. Liu, "NIST Cloud Computing Reference Architecture", NIST Special Publication 500 (2011): 292, ~ (2011)
- B. P. Rimal, "A Taxonomy and Survey of Cloud Computing Systems", International Joint Conference on INC, IMS and IDC, pp.44~51 (2009)
- M. Jensen, "Security Prospects through Cloud Computing by Adopting Multiple Clouds", IEEE International Conference on Cloud Computing (CLOUD), pp.565~572 (2011)
- M. Kretzschmar, "Security Management Interoperability Challenges for Collaboration Clouds", 4th International DMTF Academic Alliance Workshop on Systems and Virtualization Management (SVM), pp.43~49 (2010)
- M. Hojabri, "Innovation in Cloud computing: Implementation of Kerberos version5 in Cloud Computing in Order to Enhance the Security Issues", International Conference on Information Communication and Embedded Systems, pp.452~456 (2013)
- Shirly Lee, "Two Factor Authentication for Cloud Computing", Journal of Information and Communication Convergence Engineering, 8(4), pp.427~432 (2010), 한국정보통신학회
- P. Urien, "An Innovative Solution for Cloud Computing Authentication: Grids of EAP-TLS Smart Cards", International Conference on Digital Telecommunications, pp.22~27 (2010)
- P. Murukutla, "Single Sign On For Cloud", International Conference on Compupting Sciences, pp.176~179 (2012)