云存储中基于可信硬件的数据存储位置.pdfVIP

Computer Science and Application 计算机科学与应用, 2017, 7(3), 183-191 Published Online March 2017 in Hans. /journal/csa /10.12677/csa.2017.73023 Research on Using Trusted Hardware for Data Location Assurance in Cloud Storage Guan Wang, Ruixue Xu Beijing University of Technology, Beijing rd th rd Received: Mar. 3 , 2017; accepted: Mar. 20 , 2017; published: Mar. 23 , 2017 Abstract Recently, the lack of geo-location assurance of data stored in cloud storage has become a main reason which restricts organizations that deal with sensitive data (e.g., financial data, health data) to adopt cloud storage. This paper proposed a mechanism for verifying the geographic location of the stored data. We use Trusted Cryptographic Module (TCM) to identify physical machines and use a trusted third party to verify the actual location. In addition, our approach enables the verifi- cation of the trustworthiness of the physical machines which the cloud storage operators provide. The discussion shows that the approach of this paper has an adequate level of security, and by the usage of TCM and additional location audits, can enable a reliable location verification of the stored data. Keywords Cloud Storage Security, Trusted Computing, Data Geo-Location, TCM 云存储中基于可信硬件的数据存储位置 保障方法研究 王 冠，许瑞雪 北京工业大学，北京 收稿日期：2017年3月3 日；录用日期：2017年3月20 日；发布日期：2017年3月23 日 摘 要 在云存储中，一些处理敏感数据(如政府文件、资产数据、健康数据等) 的用户需要限制数据存储的地理 位置，而目前大多数云存储供应商并没有向用户提供验证数据存储位置的方法。针对这个问题，采用可 文章引用: 王冠, 许瑞雪. 云存储中基于可信硬件的数据存储位置保障方法研究[J]. 计算机科学与应用, 2017, 7(3): 183-191. /10.12677/csa.2017.73023 王冠，许瑞雪 信硬件来标识物理机器并利用可信第三方来验证数据实际存储位置。此外，还可以验证云存储供应商提