Design & Implementation of Mutually Verifiable Billing System for Cloud Computing Environment
1
조회
0
다운로드
5
인용
0
참고문헌
키워드
초록
The ability to record and account for the cloud resources usage in a credible and verifiable way is a precursor to widespread cloud deployment and availability since usage information is potentially sensitive and must be verifiably accurate. In an attempt to expand Public Key Infrastructure (PKI) usage to a cloud computing environment to provide a secure and undeniable billing mechanism, we found that the frequent public key operations for fine-grained billing lead to excessive computation overhead or bottleneck of the billing system. To alleviate these limitations, we propose a PKI-based billing system, namely which is enhanced with the delegation technology to offload complex PKI operations from the thin clients to the cloud infrastructure. In addition, we introduce the “Cloud-Notary-Authority” concept to supervise billing to make it more objective and accepted by both cloud users and providers. The proposed scheme can provide non-repudiation and integrity of the cloud resource usage records by devising a cloud-notary-authority that generates binding information between a user and resource usage log and retains the information in its local storage for future accusation. This work has been undertaken within the KAIST Cloud-Testbed for Campus-wide Educational Cloud Services. According to the performance evaluation, the throughput of our billing transactions (223.4 transactions per second) is much higher than the throughput of the PKI-based billing transactions (which averages 61.5 transactions per second).
Abstract
The ability to record and account for the cloud resources usage in a credible and verifiable way is a precursor to widespread cloud deployment and availability since usage information is potentially sensitive and must be verifiably accurate. In an attempt to expand Public Key Infrastructure (PKI) usage to a cloud computing environment to provide a secure and undeniable billing mechanism, we found that the frequent public key operations for fine-grained billing lead to excessive computation overhead or bottleneck of the billing system. To alleviate these limitations, we propose a PKI-based billing system, namely which is enhanced with the delegation technology to offload complex PKI operations from the thin clients to the cloud infrastructure. In addition, we introduce the “Cloud-Notary-Authority” concept to supervise billing to make it more objective and accepted by both cloud users and providers. The proposed scheme can provide non-repudiation and integrity of the cloud resource usage records by devising a cloud-notary-authority that generates binding information between a user and resource usage log and retains the information in its local storage for future accusation. This work has been undertaken within the KAIST Cloud-Testbed for Campus-wide Educational Cloud Services. According to the performance evaluation, the throughput of our billing transactions (223.4 transactions per second) is much higher than the throughput of the PKI-based billing transactions (which averages 61.5 transactions per second).
참고문헌 (23)
- J. Ainsworth, "Implementing a secure, service oriented accounting system for computational economies", IEEE International Symposium on CCGrid, 통권 : 2, pp.654~660 (2005)
- H.-Y. Lin, "Authentication protocols with non-repudiation services in personal communication system", IEEE Communications Letters, 3(8)
- Regev O., "The POPCORN market: an online market for computational resources", Proceedings of the 1st International Conference on Information and Computation Economies (ICE ’98), pp.148~157, ACM Press
- Buyya R, "Economic models for resource management and scheduling in Grid computing", Concurrency and Computation: Practice and Experience, 14(13), pp.1507~1542 (2002)
- Market-based proportional resource sharing for clusters, "Chun BN", Computer Science Division, ~, pp.Technical Report CSD-1092 (2000)
- R Byrom, "APEL: An implementation of Grid accounting using R-GMA", Proceedings of the 2005 UK e-Science All Hands Meeting (2005)
- M. Litzkow, "Condor: A hunter of idle workstations", presented at the 8th Int. Conf. Distributed Computing Systems (ICDCS 1988) (1988)
- Buyya R., "Nimrod", G: An architecture for a resource management and scheduling system in a global Computational Grid, 2000, ~
- Kwon, O., "GRASP: A Grid Resource Allocation System based on OGSA", In Proc. of the 13th IEEE international Symposium on High Performance Distributed Computing (2004)
- IBM, "Tivoli: Usage and Accounting Manager" (2009), IBM Press
- Guarise, A., "DataGrid Accounting System - Architecture", EU DataGrid (2003)
- P. Gardfj¨all, "Scalable grid-wide capacity allocation with the SweGrid Accounting System (SGAS)", Concurrency Computat.: Pract. Exper., 20(18), pp.2089~2122 (2008)
- A. Barmouta, "GridBank: A Grid Accounting Services Architecture (GASA) for Distributed Systems Sharing and Integration", Proceedings of the 17th IEEE IPDPS 2003, pp.22~26 (2003)
- "Amazon Elastic Compute Cloud"[URL]
- Thompson, M., "Certificate-based access control for widely distributed resources", In Proceedings of the 8th Conference on USENIX Security Symposium
- Von Welchr, "X.509 Proxy Certificates for Dynamic Delegation", In Annual PKI R&D workshop (2004)
- "Public Key Infrastructure" (2009)[URL]
- S. Tuecke, "RFC 3820: Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate Profile. IETF Network Working Group", ~ (2004)
- "Federal Information Processing Standards Publication 197 "ADVANCED ENCRYPTION STANDARD (AES)", NIST Press", ~ (2001)
- J. Jonsson, "Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1", Network Group
- E. Roberts, "TeraGrid User Portal: An Integrated Interface for TeraGrid User Information and Services TeraGrid", ~ (2008)
- D.Banks, "Towards Cloud-based Collaboration Services", Usenix Workshop HotCloud 2009
- N.Santos, "Towards Trusted Cloud Computing", Usenix Workshop HotCloud 2009