海云安全体系架构  

Security architecture of sea-cloud

作　　者：章睿[1] 薛锐[1] 林东岱[1] 

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,北京100093

出　　处：《中国科学：信息科学》2015年第6期796-816,共21页Scientia Sinica(Informationis)

基　　金：国家自然科学基金(批准号:61402471;61472414;61170280);中国科学院战略性先导科技专项(批准号:XDA06010701)资助

摘　　要：21世纪的信息化进程,正以"彻头彻尾彻里彻外"的形式,以前所未有的速度、深度和广度,走向人类社会(人)与信息网络(机)、物理世界(物)彻底融合,并带来感知终端与人机交互终端(海)、新型网络技术(网)、云计算(云)的新型组合模式和使用模式趋势.把握"人、机、物"三元融合的发展趋势和机遇,创建和发展海云协同计算的新一代信息技术体系,最终实现"感知中国"的目标,已成为新一代信息技术发展的迫切需求.然而,任何信息系统的稳定运行,都离不开信息安全体系结构的构建.信息系统的安全体系结构直接关系信息系统安全策略的实现效果,它的合理与否直接影响信息系统的功能和运行.因此,构建基于海云三元融合复杂环境的安全体系架构,是保障海云创新试验环境稳定运行的首要前提和基础.本文从海云的概念入手,在提出海云信息体系结构的基础上,分析海云各层面临的安全挑战和安全需求,最终提出海云安全体系架构,为构建海云创新试验环境提供重要的理论依据和技术支撑.The processing of information in the 21st century is moving towards a consolidation of human so- ciety （human）, information networks （cyber）, and the physical world （physical） completely fused with total and absolute form and unprecedented speed, depth, and breadth. This supports the trend towards a novel combina- tion and the usage patterns of sensing and human-computer interaction terminals （sea）, new network technology （network）, and cloud computing （cloud）. Seizing the trend and opportunity of the ternary integration of human- cyber-physical, establishing and developing the new generation of information technology architecture of sea-cloud collaborative computing, and ultimately realizing the goal of sensing China, has become an urgent demand for the new generation of IT development. However, the stable operation of any information system requires the es- tablishment of an information security architecture. The security architecture of an information system is directly related to the influence of a security policy and affects the function and operation of the systems. Therefore, building the security architecture of sea-cloud based on the complex environments of the ternary integration of human-cyber-physical is a critical prerequisite and foundation for guaranteeing stable operation of a sea-cloud innovative experimental environment. This paper first introduces the concept of sea-cloud and then analyzes the security challenges and requirements that each layer of sea-cloud faces based on the proposed information architecture. Finally, we build a security architecture for sea-cloud to provide an important theoretical basis and technical support for establishing a sea-cloud innovative experimental environment.

关 键 词：海云 信息安全体系架构 “人、机、物”三元融合 异构网融合 安全技术 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]