一种云服务器位置定位及安全性验证方案

A scheme for cloud server positioning and security verification

针对云环境下非诚实服务提供商可能伪造服务器地理位置的问题,提出一种云服务器位置定位及安全性验证方案。首先给出了整个方案的系统模型,分析了可能存在的安全威胁,然后在多点定位算法的基础之上,考虑时延波动对结果造成的影响,并赋予相应的权值,提出一种基于加权质心估计的欧几里得度量算法,对云服务器的位置进行有效定位,同时利用基于位置的安全定位协议,在误差允许的范围内验证定位结果的真实性,最后,通过对部署在阿里云上的服务器进行定位测试,证明方案可以满足区域级别精度的定位需求。

To solve the problem that dishonest service providers may forge the position of servers in cloud environment, a positioning and security verification scheme for cloud servers is proposed. Firstly, the system model of the whole scheme is given, and the possible security threats are analyzed. Then, on the basis of multi-point positioning algorithm, considering the impact of delay fluctuation on the results, and giving the corresponding weights, an Euclidean metric algorithm based on weighted centroid estimation is proposed to effectively locate the location of cloud servers. At the same time, the location-based secure positioning protocol is used to verify the authenticity of the positioning results within the error allowable range. Finally, through positioning tests on servers deployed on Aliyun, the scheme proves that it can meet the positioning requirements of regional level accuracy.