基于可信虚拟域的政务云应用研究

云计算能够提升IT资源的利用率,提高服务的开通时间、可用性以及灾难恢复能力,是信息化应用的重要支撑。建立政务云,可以解决目前电子政务发展中面临的应用迅速扩充、数据共享、建设和运维成本的上升等问题,但同时也带来一些安全威胁。在分析电子政务云可能风险的基础上,提出采用可信计算技术在政务云数据中心虚拟层建立可信虚拟域,通过安全隔离策略满足政务云的安全需求,并提出采用同态加密的方法实现政务云的加密信息检索。

RESEARCH ON E-GOVERNMENT CLOUD BASED ON TRUSTED VIRTUAL DOMAIN

Cloud computing has become an important support for information application because it can greatly enhance the utilisation of IT resources,improve service opening time,availability and disaster recovery capability.E-government cloud is a good solution to solve the problems that E-government is now facing: the rapid emerging applications,requirement data sharing,the rising cost of construction and operation.However,there are also security risks caused by the new technology.Based on the risk analysis of E-government cloud,this paper proposes to apply trusted computing technology to construct virtual trusted domain on virtual level of the IDC of E-government cloud.Security requirement of E-government cloud is met by the security isolation strategy,and the homomorphic encryption method is also suggested for encrypted information retrieval of the E-government cloud.