私有云系统中信息隐私控制模型研究

Research on Privacy Control Model for Academic Information in Private Cloud System

云计算作为目前最具吸引力的技术领域之一,具有很多的优势,例如具有高度可扩展的IT资源以及非常高的灵活性等,只是在隐私控制方面略显不足。为了有效降低私有云环境下个人隐私数据被盗用、用户配置文件管理与访问服务的风险,提出了一种针对私有云系统的隐私策略和访问控制策略,同时通过Eucalyptus开源云基础设施的配置来对其进行增强。对于私有云模型上存在的安全问题,利用现有Eucalyptus云基础设施将一些高敏感的数据存储在私有云上,而一些敏感程度较低的数据则存储在私有云的公共存储上。私有云计算模型上隐私增强主要基于角色访问控制模型以及在敏感资源中部署隐私策略与安全约束。基于此,对基于角色的访问控制模型进行一定的扩展,并简单引入相关的角色关系以及访问权限委托。

As one of the most attractive technology fields,cloud computing has many advantages,such as highly scalable IT resources and very high flexibility,but it is slightly insufficient in privacy control.In order to effectively reduce the risks of personal privacy data theft,user profile management and access services in the private cloud environment,a privacy policy and access control policy for academic private cloud system is proposed,and enhanced through the configuration of Eucalyptus open source cloud infrastructure.To address the security issues on the private cloud model,the existing Eucalyptus cloud infrastructure is utilized to store some highly sensitive data on the private cloud,while some less sensitive data is stored on the public storage of the private cloud.Privacy enhancement in private cloud computing model is mainly based on role access control model and the deployment of privacy policies and security constraints in sensitive resources.Based on this,the role based access control model to some extent is extended,and the related role relationship and access authority delegation are simply introduced.