CAJ | 학술논문

针对目前云计算环境中尚缺乏一个完整的密钥管理方案, 分析了云计算环境密钥管理的特殊安全需求, 基于XML密钥管理规范建立了云计算密钥管理框架。设计了云计算密钥管理架构以及各部分模块功能, 提出了基于信任域的工作模式, 对系统进行了性能和安全性分析, 并提出相应的解决方案。实验分析结果表明, 该方案相对于传统PKI系统性能更高, 能够更好地满足云计算密钥管理需求。
침대목전운계산배경중상결핍일개완정적밀약관리방안, 분석료운계산배경밀약관리적특수안전수구, 기우XML밀약관리규범건립료운계산밀약관리광가。설계료운계산밀약관리가구이급각부분모괴공능, 제출료기우신임역적공작모식, 대계통진행료성능화안전성분석, 병제출상응적해결방안。실험분석결과표명, 해방안상대우전통PKI계통성능경고, 능구경호지만족운계산밀약관리수구。
This paper analyzed the special security requirement of cloud computing key management, and built the cloud computing key management framework based on XKMS. At first, it designed the cloud computing key management architecture and modules. Then proposed the trust domain-based working pattern. At last, it analyzed the performance and security of the framework and proposed the corresponding solutions. The results show that it can meet the cloud computing key management needs well.