云边融合安全存储架构及技术挑战  

Cloud-edge integrated secure storage architecture and technical challenges

作　　者：李经纬 孙嘉 杨劲远 沈志荣 杨浩淼 方华 陈厅 张小松 Jingwei LI;Jia SUN;Jingyuan YANG;Zhirong SHEN;Haomiao YANG;Hua FANG;Ting CHEN;Xiaosong ZHANG(School of Computer Science and Engineering(School of Cyber Security),University of Electronic Science and Technology of China,Chengdu 611731,China;School of Informatics(National Characteristic Demonstration Software School),Xiamen University,Xiamen 361005,China;Guangdong AVCiT Technology Holding Co.,Ltd.,Guangzhou 510440,China;School of Information and Software Engineering,University of Electronic Science and Technology of China,Chengdu 611731,China)

机构地区：[1]电子科技大学计算机科学与工程学院(网络空间安全学院),成都611731 [2]厦门大学信息学院(特色化示范性软件学院),厦门361005 [3]广东魅视科技股份有限公司,广州510440 [4]电子科技大学信息与软件工程学院,成都611731

出　　处：《中国科学:信息科学》2025年第3期516-527,共12页Scientia Sinica(Informationis)

基　　金：国家重点研发计划青年科学家(批准号:2022YFB4501200);国家自然科学基金(批准号:62072381,62072081);四川省国际科技创新合作/港澳台科技创新合作(批准号:2024YFHZ0339);中央高校科研业务费(批准号:ZYGX2021J018);四川省科技计划(批准号:2024NSFTD0031)资助项目。

摘　　要：物联网的迅猛发展对数据管理提出了诸多挑战,为应对这些挑战并满足管理日益增长数据的切实需求,国家制订了“协同发展云计算与边缘计算”的远景规划.在此背景下,本文提出了一种云边融合安全存储架构,旨在探索物联网数据在云边融合场景下的有效管理途径.该架构利用机密计算、数据缩减、跨域同步等关键技术,支撑数据的高效管理和安全保障.在此基础上,本文进一步提出了一套适应于上述安全存储架构的系统核心设计方案,解决实施过程中的效率问题.此外,本文还探讨了该架构下的未来研究方向,以期为新场景下物联网数据管理提供新视角和解决思路.The rapid development of the Internet of Things(IoTs)has posed numerous challenges to data management.To address these challenges and meet the growing demand for managing ever-increasing amounts of data,the nation has formulated a strategic plan for the“coordinated development of cloud computing and edge computing.”This paper proposes a cloud-edge integrated secure storage architecture that aims at exploring effective management approaches for IoT data in cloud-edge fusion scenarios.This architecture leverages key technologies such as confidential computing,data reduction,and cross-domain synchronization to support efficient data management and security assurance.On this basis,the paper further presents a core system design solution tailored to the proposed secure storage architecture,addressing efficiency bottlenecks during implementation.Additionally,the paper discusses future research directions under this architecture,aiming to provide new perspectives and solutions for IoT data management in emerging scenarios.

关 键 词：云边融合 数据缩减 可信执行环境 机密计算 增量同步 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]