基于云计算的开放性教学资源平台建设研究

针对当前高等教育信息化资源平台建设零散分布、重复投资等突出问题,提出了基于云计算的开放性教学资源平台建设方案。以期建立一个基于云计算的集中管理、分散存储的资源开发、管理、应用系统平台,形成高等教育信息化资源共建共享的机制。首先分析了基于云计算的开放性教学资源平台建设的可行性,然后提出了基于云计算的开放性教学资源平台的设计思想、系统设计、系统架构、资源库建设内容,并对主要应用功能进行了概述,有助于推进基于云计算的高校信息化资源平台建设进程。     

基于类“云服务”的可视化信息发布系统技术

以某些企业车间信息发布需求为目标,在开目工艺信息系统基础上,结合SOA架构、WebService服务、云服务的思想和3D模型的轻量化处理技术,实现跨系统用户权限的基于应用代理的类“云服务”集成架构,构造混合架构的车间可视化信息发布系统．应用表明,基于混合集成架构、应用代理技术,较好解决了两种架构应用的异构集成和优势互补问题．     

基于TrustZone的可信移动终端云服务安全接入方案

可信云架构为云计算用户提供了安全可信的云服务执行环境,保护了用户私有数据的计算与存储安全. 然而在移动云计算高速发展的今天, 仍然没有移动终端接入可信云服务的安全解决方案. 针对上述问题, 提出了一种可信移动终端云服务安全接入方案, 方案充分考虑了移动云计算应用背景, 利用ARM TrustZone硬件隔离技术构建可信移动终端, 保护云服务客户端及安全敏感操作在移动终端的安全执行, 结合物理不可克隆函数技术, 给出了移动终端密钥与敏感数据管理机制. 在此基础之上, 借鉴可信计算技术思想, 设计了云服务安全接入协议, 协议兼容可信云架构, 提供云服务端与移动客户端间的端到端认证. 分析了方案具备的6种安全属性, 给出了基于方案的移动云存储应用实例, 实现了方案的原型系统. 实验结果表明, 可信移动终端TCB较小, 方案具有良好的可扩展性和安全可控性, 整体运行效率较高.     

Providing security and fault tolerance in P2P connections between clouds for mHealth services

The mobile health (mHealth) and electronic health (eHealth) systems are useful to maintain a correct administration of health information and services. However, it is mandatory to ensure a secure data transmission and in case of a node failure, the system should not fall down. This fact is important because several vital systems could depend on this infrastructure. On the other hand, a cloud does not have infinite computational and storage resources in its infrastructure or would not provide all type of services. For this reason, it is important to establish an interrelation between clouds using communication protocols in order to provide scalability, efficiency, higher service availability and flexibility which allow the use of services, computing and storage resources of other clouds. In this paper, we propose the architecture and its secure protocol that allows exchanging information, data, services, computing and storage resources between all interconnected mHealth clouds. The system is based on a hierarchic architecture of two layers composed by nodes with different roles. The routing algorithm used to establish the connectivity between the nodes is the shortest path first (SPF), but it can be easily changed by any other one. Our architecture is highly scalable and allows adding new nodes and mHealth clouds easily, while it tries to maintain the load of the cloud balanced. Our protocol design includes node discovery, authentication and fault tolerance. We show the protocol operation and the secure system design. Finally we provide the performance results in a controlled test bench.     

基于云服务的Java虚拟教学环境应用研究

随着云服务教育技术的发展,高等院校Java教学模式发生了重大的改革和变化。详细地分析了传统教学模式存在的不足,阐述了虚拟教学环境的背景理论,同时给出了基于云服务的Java虚拟教学环境功能和系统架构,激发学生学习积极性,创新教学模式。     

Pandora: An SMS-oriented m-informational system for educational realms

e-Informational systems based on the Internet infrastructure and services like e-mail, WWW, etc., are a de-facto option for various educational realms, in order to enhance the quality and diversity of services offered to their educators and students. On the other hand, despite the fact that pure mobile services like short message service (SMS) or multimedia message service (MMS) have managed to highly penetrate the wireless market to a great degree and gain users’ wide acceptance, are rarely employed to support or offer informational services in the context of education. In this paper, we describe in detail a fully functional SMS-oriented mobile-informational (m-informational) system named Pandora that was designed and developed from the onset to specifically support a plethora of services obtainable mainly by the students of our university. The analysis and our contribution are two-fold starting from the theoretical background and continuing to the technical part of the Pandora system. We present and discuss several issues, including the different services that Pandora supports, system architecture, Pandora's box, core, Web services, security, etc. We demonstrate that the proposed system is practical to implement, flexible, effective, secure, affordable and above all scalable and potentially extensible.     

基于Xen的私有云

为了充分利用企业分布在不同系统的基础设施,保护企业的核心数据,提供一个统一的安全的运行接口和运行环境,避免为每个系统重新部署、设计的重复繁杂工作,一个较好的解决方案是构建企业私有云.本文分析了私有云的架构及其优势,例如拓扑结构、缓存机制、负载均衡策略和存储池设计,通过物理机集群技术和Xen虚拟化技术,设计基于Xen的私有云基础设施,为用户提供统一的、简单的结构界面.     

云计算体系结构及应用实例分析

云计算包含两个方面的基本内容：一、描述用于构造应用程序的基础架构;二、描述建立在这种基础架构之上的应用和扩展服务;针对云计算的体系结构及应用实例,剖析其背后的技术含义以及当前云计算平台所采用的实现方法,进而评析当前云计算的发展状况,探讨实现云计算的技术方案。     

Cloud E-learning for Mechatronics: CLEM

This paper describes results of the CLEM project, Cloud E-learning for Mechatronics. CLEM is an example of a domain-specific cloud that is especially tuned to the needs of VET (Vocational, Education and Training) teachers. An interesting development has been the creation of remote laboratories in the cloud. Learners can access such laboratories to support their practical learning of mechatronics without the need to set up laboratories at their own institutions. The cloud infrastructure enables multiple laboratories to come together virtually to create an ecosystem for educators and learners. From such a system, educators can pick and mix materials to create suitable courses for their students and the learners can experience different types of devices and laboratories through the cloud. The paper provides an overview of this new cloud-based e-learning approach and presents the results. The paper explains how the use of cloud computing has enabled the development of a new method, showing how a holistic e-learning experience can be obtained through use of static, dynamic and interactive material together with facilities for collaboration and innovation.     

Framework and deployment of a cloud-based advanced planning and scheduling system

Many small and medium-sized manufacturing enterprises (SMEs) have already implemented enterprise resource planning (ERP) and manufacturing execution system (MES) and began to start the journey of cloud manufacturing; however, the high cost of hardware and software investment, implementation, and maintenance usually hinder SMEs from adopting an advanced planning and scheduling (APS) system. This paper aims to develop a cloud-based APS (C-APS) system framework, the service structure, and approach of deploying the C-APS system in a public cloud infrastructure platform and service provider or hybrid cloud platform. The package diagram is proposed for building the C-APS system's virtual factory model to improve modeling efficiency and data stability. The C-APS system is a cloud-based and object-oriented software; its simulation-based scheduling engine can generate the significant production and operations schedule, and has the characteristics of on-demand self-service, quickly expanding and adjusting to the virtual plant model. The C-APS system's application in a leading automotive part assembly company's printed circuit board production scheduling shows that the input planning data model is easy to maintain. The scheduling quality is high; the computing time is short and acceptable for practical application.     

一种云计算的虚拟网络管理系统

云计算技术是IT产业界的一场技术革命,已经成为IT行业未来发展的方向,这种变化使得IT基础架构的运营专业化程度不断集中和提高。在云计算的使用中,云计算使用者缺乏对于网络的配置能力,这部分目前并没有开放给用户所使用。虽然云计算的虚拟网络服务已经受到了更多云计算提供商的关注,但是目前对这方面的支持还处于不完善的阶段。本文提出了一种基于云计算的虚拟网络管理系统,本系统能够以动态的方式为用户提供基于云计算的网络服务,可以根据用户需求实现虚拟网络配置,并加以优化,以便最大限度地提高虚拟网络的性能。     

Model Architecture for Cloud Computing-Based Library Management

The purpose of this article is to provide a cloud computing system-based architecture for library automation services. In this article, a consortium-based library automation system has been conceptualized and a model architecture has been proposed. The article describes the benefit of virtualization (Virtual Machine as a library) of cloud computing toward libraries and why/how a librarian can shift from an on-premise based library system to cloud-based system to overcome infrastructure requirement, staff requirements for administration, system maintenance, costs for backup, and so forth. The article outlines the traditional system of library automation. The proposed model provides cloud platform and application virtualization solutions for deploying and managing Service Oriented Architecture (SOA) for libraries. The model illustrates how a group of libraries, participating into a consortia, could collaborately obtain access to LMS software application through the virtual platform. This article is one of the first of its kind to propose such architecture for library automation.     

Safeguarding Cloud Computing Infrastructure: A Security Analysis

Cloud computing is the provision of hosted resources, comprising software, hardware and processing over the World Wide Web. The advantages of rapid deployment, versatility, low expenses and scalability have led to the widespread use of cloud computing across organizations of all sizes, mostly as a component of the combination/multi-cloud infrastructure structure. While cloud storage offers significant benefits as well as cost-effective alternatives for IT management and expansion, new opportunities and challenges in the context of security vulnerabilities are emerging in this domain. Cloud security, also recognized as cloud computing security, refers to a collection of policies, regulations, systematic processes that function together to secure cloud infrastructure systems. These security procedures are designed to safeguard cloud data, to facilitate regulatory enforcement and to preserve the confidentiality of consumers, as well as to lay down encryption rules for specific devices and applications. This study presents an overview of the innovative cloud computing and security challenges that exist at different levels of cloud infrastructure. In this league, the present research work would be a significant contribution in reducing the security attacks on cloud computing so as to provide sustainable and secure services.     

一种基于云的 Web 应用安全服务

安全云服务的核心思想是借助云计算的高可靠性、弹性扩容、按需定制的特点,将传统硬件网络安全功能虚拟化,以服务的形式对外提供安全防护能力。目前该服务技术和研究处于初期发展阶段,在技术概念、实施架构以及拓展应用方面还没有统一的界定,因此开展安全云服务技术和应用研究具有重要的理论和实践意义。本文以中国科学院信息保障示范工程“Web应用安全云服务平台”为实践背景,首先明确阐述安全云服务的概念、特征、应用领域及国内外发展现状,然后针对Web应用的安全,提出基础架构设计及关键技术,并描述该架构下具体应用的实践效果。     

分布式云的研究进展综述

云计算作为全新的计算模式,将数据中心的资源包括计算、存储等基础设施资源通过虚拟化技术以服务的形式交付给用户,使得用户可以通过互联网按需访问云内计算资源来运行应用.为面向用户提供更好的服务,分布式云跨区域联合多个云站点,创建巨大的资源池,同时利用地理分布优势改善服务质量.近年来分布式云的研究逐渐成为学术界和工业界的热点.文中围绕分布式云系统中研究的基本问题,介绍了国际国内的研究现状,包括分布式云系统的架构设计、资源调度与性能优化策略和云安全方案等,并展望分布式云的发展趋势.     

基于云计算的网络学习资源共建共享关键技术研究

云计算具备十分可靠的安全的数据存储系统和方便快捷的网络服务系统,教育资源通过云计算可以有效地进 行提取、组织、分类和索引,进而实现教育资源的有效共享。本文就网络学习资源共享中出现的一些问题进行分析,探究在云 计算环境下网络学习资源共建共享的解决方案     

数据处理中心云服务综合架构的研究与应用

分析云计算研究和应用的现状,阐述了综合型项目中基于云服务架构建设数据处理中心的典型模式,采用了理论分析和实践设计的方法,重点研究并提出了数据处理中心的云服务综合架构,包括云计算平台、资源管理、架构管理、计算资源部署和云存储数据仓库,在建设成本、移植风险和业务性能方面分析了云架构的基础优势,并展望了云架构发展前景。     

Understanding and predicting students' intention to use mobile cloud storage services

The challenges of mobile devices such as limited bandwidth, computing, and storage have led manufacturers and service providers to develop new value-added mobile services. To address these limitations, mobile cloud computing, which offers on-demand services including platforms, infrastructure, and software have been developed. This study attempts to build a significantly improved research framework based on the Technology Acceptance Model in order to identify factors that affect students' attitudes toward and intentions in using mobile cloud storage services. A structural equation model was used to assess the proposed model based on the data collected from 262 undergraduate students. Results show that perceived usefulness, subjective norm, and trust have a significantly positive effect on the attitude, which in turn is a significant predictor of behavioral intentions. The research model, which explains 82% of the variance in attitudes toward using mobile cloud storage services has a strong predictive power. The findings have both theoretical and practical implications for academics, managers, and educational institutions.     

A Cloud-Based BPM Architecture with User-End Distribution of Non-Compute-Intensive Activities and Sensitive Data

While cloud-based BPM (Business Process Management) shows potentials of inherent scalability and expenditure reduction, such issues as user autonomy, privacy protection and efficiency have popped up as major concerns. Users may have their own rudimentary or even full-fledged BPM systems, which may be embodied by local EAI systems, at their end, but still intend to make use of cloud-side infrastructure services and BPM capabilities, which may appear as PaaS (Platform-as-a-Service) services, at the same time. A whole business process may contain a number of non-compute-intensive activities, for which cloud computing is over-provision. Moreover, some users fear data leakage and loss of privacy if their sensitive data is processed in the cloud. This paper proposes and analyzes a novel architecture of cloud-based BPM, which supports user-end distribution of non-compute-intensive activities and sensitive data. An approach to optimal distribution of activities and data for synthetically utilizing both user-end and cloud-side resources is discussed. Experimental results show that with the help of suitable distribution schemes, data privacy can be satisfactorily protected, and resources on both sides can be utilized at lower cost.