Enhancing Security by Using GIFT and ECC Encryption Method in Multi-Tenant Datacenters

Data security and user privacy have become crucial elements in multi-tenant data centers.Various traffic types in the multi-tenant data center in the cloud environment have their characteristics and requirements.In the data center network(DCN),short and long flows are sensitive to low latency and high throughput,respectively.The traditional security processing approaches,however,neglect these characteristics and requirements.This paper proposes a fine-grained security enhancement mechanism(SEM)to solve the problem of heterogeneous traffic and reduce the traffic completion time(FCT)of short flows while ensuring the security of multi-tenant traffic transmission.Specifically,for short flows in DCN,the lightweight GIFT encryption method is utilized.For Intra-DCN long flows and Inter-DCN traffic,the asymmetric elliptic curve encryption algorithm(ECC)is utilized.The NS-3 simulation results demonstrate that SEM dramatically reduces the FCT of short flows by 70%compared to several conventional encryption techniques,effectively enhancing the security and anti-attack of traffic transmission between DCNs in cloud computing environments.Additionally,SEM performs better than other encryption methods under high load and in largescale cloud environments.

Multi-Tenant应用的页面元素可配置性研究

通过介绍Multi-Tenant并分析SaaS(Software as a Service)框架下Multi-Tenant(多租户)应用的页面元素个性化需求的问题,归纳提出并评估页面元素可配置的实施方案,最后讨论方案的应用及前景。

A Multi-Tenant Usage Access Model for Cloud Computing

Most cloud services are built with multi-tenancy which enables data and configuration segregation upon shared infrastructures.It offers tremendous advantages for enterprises and service providers.It is anticipated that this situation will evolve to foster cross-tenant collaboration supported by Authorization as a service.To realize access control in a multi-tenant cloud computing environment,this study proposes a multi-tenant cloud computing access control model based on the traditional usage access control model by building trust relations among tenants.The model consists of three sub-models,which achieve trust relationships between tenants with different granularities and satisfy the requirements of different application scenarios.With an established trust relation in MT-UCON(Multi-tenant Usage Access Control),the trustee can precisely authorize cross-tenant accesses to the trustor’s resources consistent with constraints over the trust relation and other components designated by the trustor.In addition,the security of the model is analyzed by an information flow method.The model adapts to the characteristics of a dynamic and open multi-tenant cloud computing environment and achieves fine-grained access control within and between tenants.

基于Multi-Tenant应用的数据个性化需求问题研究

本文通过介绍Multi-Tenant并分析SaaS(Software as a Service)框架下Multi-Tenant(多租户)应用的数据个性化需求的问题,提出并评估数据个性化的实施方案,最后讨论了方案的应用及适用条件。

A Temporal Multi-Tenant RBAC Model for Collaborative Cloud Services

Multi-tenant collaboration brings the challenge to access control in cloud computing environment.Based on the multi-tenant role-based access control(MT-RBAC)model,a Temporal MT-RBAC(TMT-RBAC)model for collaborative cloud services is proposed.It adds the time constraint between trusted tenants,including usable role time constraint based on both calendar and interval time.Analysis shows that the new model strengthens the presentation ability of MT-RBAC model,achieves the finer-grained access control,reduces the management costs and enhances the security of multi-tenant collaboration in cloud computing environment.

The Study of Multi-Tenant's Configurability

SaaS (Software as a Service)the application mode occurs exactly along with the broadening and convenience of network platform, its core is the application of Multi-Tenant. The Multi-Tenant under SaaS not only makes Application Software more efficient and convenient, but also reduce the cost of software development, hardware purchase, training and upgrade maintenance, which can relieve the financial pressure of enterprises invisibly, so that enterprises can focus on the business development. Aiming at the personalized demand of Multi-Tenant's tenement, this thesis studies about personalized configuration of data, function, and operation interface, moreover, it shows the method of personalized configuration. It also indicates how to make the Multi-Tenant come true through personalized configuration, and realizes unified management of these applications.

Collaborative Network Security in Multi-Tenant Data Center for Cloud Computing

A data center is an infrastructure that supports Internet service. Cloud comput the face of the Internet service infrastructure, enabling even small organizations to quickly ng is rapidly changing build Web and mobile applications for millions of users by taking advantage of the scale and flexibility of shared physical infrastructures provided by cloud computing. In this scenario, multiple tenants save their data and applications in shared data centers, blurring the network boundaries between each tenant in the cloud. In addition, different tenants have different security requirements, while different security policies are necessary for different tenants. Network virtualization is used to meet a diverse set of tenant-specific requirements with the underlying physical network enabling multi-tenant datacenters to automatically address a large and diverse set of tenants requirements. In this paper, we propose the system implementation of vCNSMS, a collaborative network security prototype system used n a multi-tenant data center. We demonstrate vCNSMS with a centralized collaborative scheme and deep packet nspection with an open source UTM system. A security level based protection policy is proposed for simplifying the security rule management for vCNSMS. Different security levels have different packet inspection schemes and are enforced with different security plugins. A smart packet verdict scheme is also integrated into vCNSMS for ntelligence flow processing to protect from possible network attacks inside a data center network

MMOS:支持超卖的多租户数据库内存资源共享方法

多租户数据库为每个租户分配固定的资源配额,而这些资源配额通常未全部得到有效利用,这种静态分配策略导致资源利用率不高。若在不影响租户性能的前提下将未利用的空闲资源共享给其他租户使用,即实现资源超卖,则可以提高资源利用率、提升平台收益。为了支持资源超卖,需要准确预测租户的资源需求,动态地按需为租户分配资源。已有的针对多租户数据库的资源共享方法的研究对象主要是CPU资源,鲜有支持超卖的内存资源共享方法。鉴于此,在联机分析处理场景下,提出了一种支持超卖的多租户数据库内存资源共享方法MMOS(Multi-tenant database Memory resource Overselling and Sharing)。该方法通过准确预测每个租户的内存需求区间,按照区间上限为租户动态调整内存配额,在不影响租户性能的前提下,统一管理空闲内存资源以支持更多租户,实现内存超卖。实验结果表明,MMOS在租户负载动态变化的场景下具有较好效果。在不同资源量的资源池下,支持的租户数可以增加2~2.6倍,资源利用率峰值提升175%~238%。同时,每个租户的业务与性能未受影响。

面向多租户数据中心的联邦学习架构下通信开销优化方法

为降低多租户数据中心联邦学习架构下的高通信开销问题,提出一种基于三元演化模型参数的通信开销优化算法。首先,建立面向多租户数据中心的联邦学习架构模型来实现数据隐私保护;其次,针对联邦学习架构的引入导致租户和数据中心交互产生了过高的通信开销问题,提出一种基于三元演化模型参数的通信开销优化算法,通过结合最优局部模型和三元向量化模型参数的演化方向来减少租户与数据中心模型参数传输之间的冗余通信;同时,基于联邦学习的隐私研究论证分析了在传输通信过程中所提算法能有效保障参与训练租户的隐私信息。最后,实验结果表明,所提方法在保障训练精度的前提下,相比于联邦平均对比算法能有效降低30%的冗余通信开销。

多租户虚拟专用网跨域单点登录认证方法仿真

不同租户的虚拟专用网络(Virtual Private Network,VPN)用户可能被分布在不同的域中,域之间存在隔离,同时租户又需要共享一些共同的资源,在身份认证过程中易产生干扰和冲突及认证信息泄露的问题,成为多租户VPN跨域单点登录认证的一种挑战。为此,展开多租户虚拟专用网跨域单点登录认证方法仿真。利用粒子群算法为每个租户配置独立的VPN资源,防止各用户身份认证的干扰和冲突。并建立各VPN域内用户跨域通信之间的安全模型,保障用户的跨域通信安全,防止认证过程中的信息泄露或被篡改;在上述确保资源信息安全的基础上,建立基于票据的用户跨域单点登录认证协议,实现多租户虚拟专用网中用户的跨域单点登录认证。结果表明,所提方法能够在降低认证压力,且错误拒绝率、错误接收率以及相等错误率仅为19.79%、7.01%、10.77%,提高认证性能。

基于虚拟化的软件定义DSP计算技术研究

随着天基计算密集型任务快速增长,星上任务对计算的需求也随之迅猛上涨。星载计算机系统通常采用异构电子系统,其“算力”被封闭在独立的星载计算机内,各计算资源不能彼此共享,容易产生资源浪费,且各个嵌入式软件和可编程逻辑采用非标准的编程,不支持统一升级和综合调用。针对此问题,以异构CPU和DSP计算资源作为研究重点,设计一种基于虚拟化技术的软件定义DSP计算架构,通过分析当前所面临的抽象化和多租户的技术挑战,并借鉴异构GPU和FPGA相关虚拟化技术,综合运用硬件抽象层、时分复用虚拟化、接口调用重定向、组件注册和数据路由等技术,实现DSP异构计算资源多用户共享和高效统一调用。试验验证表明,软件定义DSP计算架构可实现星载异构计算系统软硬件灵活解耦,并支持多个用户和应用同时访问和调用单个DSP计算资源。

省级大集中模式不动产登记云平台建设与应用——以吉林省为例

本文基于云原生搭建高可用、高并发、高效运维的省级大集中模式不动产登记云平台,构建不动产登记业务管理体系和“互联网+不动产登记”服务体系,实现不动产登记系统从“市县建设”到“市县使用”、“被动接收数据”到“主动管理数据”、“线下办理”到“线上线下办理”的转变,减少不动产登记系统建设的投入,增强不动产登记的监管能力,这是不动产登记发展的必然趋势。本文重点介绍了吉林省大集中模式不动产登记云平台的总体框架设计、数据库设计和部署方式,以及平台设计中的数据分析与建库、多租户服务定制技术路线等内容。省内试点城市的推广应用表明,该平台在便民利企、提升营商环境等方面取得了一定成效,为后续全省推广起到了示范作用,对其他省份不动产管理平台建设具有一定的参考价值。

基于中国蓝云的智能媒资系统设计与实现

本文从建设目标、架构设计、对接设计与实现等方面,对基于中国蓝云智能媒资系统的多租户对接、历史媒资迁移、统一接口设计以及出入库管理、智能调度流程等关键技术进行了探讨,可为同类媒资系统建设提供一些技术参考。

基于多租户架构的企业GPT构造器的设计及其在5G消息上的应用

ChatGPT以其强大的自然语言处理和知识推理技术,在全球范围内引起了大型语言模型(LLM)的热潮。通过基于多租户基础架构的企业GPT构造器,实现了企业网站抓取和文档加载功能,为中小型企业租户提供了私域数据喂养和向量化服务,并将语料向量作为LLM的长期记忆,构建了企业级GPT能力。通过配置的5G消息Chatbot同企业客户进行交互,在交互过程中,其能通过检索向量数据库中的企业相关信息,提供企业级的ChatGPT服务。

基于多租户虚拟环境的云平台网络安全设计与应用

介绍云平台安全整体架构设计,针对多租户虚拟网络环境下租户与租户之间、租户内部和租户对外访问等多种安全访问需求,围绕云网络安全设计具体说明虚拟扩展局域网(Virtual Extensible Local Area Network,VXLAN)、安全组、虚拟防火墙等方面的安全防护技术,重点探讨分布式虚拟防火墙和安全虚拟组件两种安全防护系统的特点与优势,为云平台安全防护提供新的思路和解决方案。

基于Stackelberg博弈定价的电力需求响应激励方法

结合多租户数据中心的特点,通过考虑多租户数据中心的电力定价问题提出一种基于非线性规划的高效激励定价方法。建立需求-响应模型,及其相关的成本和收益函数;为反映需求方与响应方的定价交互,采用Stackelberg博弈进行建模,证明了该模型下纳什均衡点的存在性;基于非线性规划方法求解最优得到纳什均衡点,即满足需求方成本最低和响应方利益最大化的目的。将设计的方法与其它经典的最优化方法进行比较,实验结果表明,提出方法能获得最佳的电力定价,达到需求响应方共赢的目的,时间复杂度低。

Blockchain Merkle-Tree Ethereum Approach in Enterprise Multitenant Cloud Environment

This research paper puts emphasis on using cloud computing with Blockchain(BC)to improve the security and privacy in a cloud.The security of data is not guaranteed as there is always a risk of leakage of users’data.Blockchain can be used in a multi-tenant cloud environment(MTCE)to improve the security of data,as it is a decentralized approach.Data is saved in unaltered form.Also,Blockchain is not owned by a single organization.The encryption process can be done using a Homomorphic encryption(HE)algorithm along with hashing technique,hereby allowing computations on encrypted data without the need for decryption.This research paper is composed of four objectives:Analysis of cloud security using Blockchain technology;Exceptional scenario of Blockchain architecture in an enterprise-level MTCE;Implementation of cipher-text policy attribute-based encryption(CPABE)algorithm;Implementation of Merkle tree using Ethereum(MTuE)in a Multi-tenant system.Out of these four objectives,the main focus is on the implementation of CP-ABE algorithm.CP-ABE parameters are proposed for different levels of tenants.The levels include inner tenant,outer tenant,Inner-Outer-Tenant,Inner-Outer-External-Tenant,Outer-Inner-Tenant,External-Outer-Inner-Tenant and the parameters such as token,private key,public key,access tree,message,attribute set,node-level,cipher-text,salting which will help in providing better security using CP-ABE algorithm in a multitenant environment(MTE)where tenants can be provided with different levels of security and achieved 92 percentage of authenticity and access-control of the data.

基于改进北极熊算法的多租户数据中心电力成本优化方法研究

为了满足电力需求响应,通过改进北极熊算法提出了一种面向多租户数据中心的成本优化算法。首先采用一对多的逆向拍卖模型建立租户及运营商的关系,激励租户主动参与拍卖并提交相应的节能方案和期望奖励;接着通过改进现有的北极熊算法,来求解最优租户组合和最小成本,其中采用了sigmoid函数对坐标进行离散化处理;同时为了增强算法跳出局部最优的能力在算法中融入了变异策略,并且为提高算法的寻优能力,采用自适应视野代替固定视野来动态调整局部搜索的范围,进一步降低算法陷入局部最优解的概率。最后将提出的方法分别与经典的算法进行比较,实验结果表明在满足需求响应的情况下,提出的方法不仅花费成本最低,而且具有更高的效率。

多租户固态盘服务质量保障技术综述

得益于高密度闪存技术发展、高并行存储架构以及良好的接口技术支持,多个租户共享使用一个固态盘已经成为提高存储资源利用率和降低运营成本的常见方式.然而,多个租户竞争使用固态盘内有限的存储资源,产生相互干扰,因此如何保障多租户固态盘服务质量成为近年来的研究热点.首先,分析多租户固态盘服务质量保障面临性能干扰、性能不公平及总体性能损失三大问题;然后,从如何保障性能隔离、如何保障性能公平及如何优化总体性能3类目标,对现有工作进行全面分类介绍,并梳理它们的技术演进方向;最后,对多租户固态盘服务质量保障技术的研究现状进行总结,并展望潜在的未来研究方向.

面向多租户的省级广电智能媒资管理平台的设计与实践

浙江广播电视集团为了提高媒体资料的使用效率,引入云计算、大数据、人工智能、4K超高清等先进技术,建设了以“中国蓝云”为基础、面向多租户的智能媒资管理平台,实现了对媒体资源的集中管理和高效利用。本文详细介绍了该平台的架构设计和模块功能,并对技术创新点进行了简要论述。