基于云计算的密钥管理架构研究与设计  

Based on Cloud Computer Key Management Architecture Research and Design

作　　者：李美华[1] 甘宏[1] 潘丹[1] 

机构地区：[1]广州城建职业学院,广东广州510925

出　　处：《科技广场》2013年第1期44-49,共6页Science Mosaic

摘　　要：基于密钥管理系统管理架构是云计算中各虚拟机提供密钥的产生、分配、验证和撤销服务,是保证云提供商和用户信息安全的基础。本文针对目前云计算环境中尚缺乏一个完整的密钥管理方案,分析了云计算环境密钥管理的特殊安全需求,基于XML(eXtensible Markup Language)密钥管理规范建立了云计算密钥管理框架。首先,设计了云计算密钥管理架构以及各部分模块功能;其次,提出了基于信任域的工作模式;最后,对系统进行了性能和安全性分析,并提出相应的解决方案。通过实验分析结果表明,该方案相对于传统PKI系统性能更高,能够更好地满足云计算密钥管理需求。Based on the key management system management architecture of cloud computing each virtual machine provides key generation,distribution,validation and withdrawal of the service,is the guarantee of cloud providers and users of information security foundation.In view of the current cloud computing environment is the lack of a complete key management scheme,analysis of the cloud computing environment key management of special security requirements,based on the XML（eXtensible Markup Language） key management norms established a cloud computing key management framework.First of all,the design of the cloud computing key management architecture and the part of the module function;secondly,based on the trust region model;finally,has carried on the system performance and security analysis,and proposed the corresponding solutions.By analysis of the experimental results show that,the scheme as compared to the traditional PKI system with higher performance,better able to meet the needs of cloud computing,key management.

关 键 词：云计算 密钥管理 XML密钥管理规范 信任域 模块设计 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]