云计算环境中数据安全的理论与关键技术研究

Cloud computing has led to the innovation of information technology for its advances on intensiveness, scalability and specialization, and accordingly, has been highly valued and focused among the industrial and academic societies. At the same time, however, the development and dissemination of the cloud computing have met tough challenges on data security in cloud computing, which has become one of the most vital criteria being an obstacle to the development of the technology. This project aims to investigate the theory, methods and critical technologies of data encryption, utilization, sharing and its security deployment in the cloud computing environment, in order to fulfil the requirements on data security in this field. The research work will include the optimization of data deployment with security constraints and the semantic search of ciphertext supporting privacy protection in the cloud environment. Furthermore, it will cover the access control supporting multi-authority authorization and the proof of data ownership and benefits based on digital watermarking technologies in the cloud computing. Eventually, it will implement a prototype system as a service platform for data security in a cloud in order to verify and evaluate all the achievements. Through this project, original theoretical results and critical technologies will be gained on data encryption utilization, sharing and its security deployment in the cloud computing. It will provide solid technological support and protection to data security and user privacy in the cloud computing environment. Most importantly, the project will motivate us for sound and fast development in the cloud security field, and establish a firm foundation for us to reach the peak of this scientific and technological domain.

云计算代表了信息技术向集约化、规模化与专业化发展的趋势，得到了产业界与科技界的高度重视。然而，云计算环境中数据的安全问题给云计算的普及和发展带来了严峻的挑战，成为制约云计算发展的重要因素。本项目瞄准云计算环境中数据安全的重大需求，深入研究云计算环境中数据的加密、利用、共享及数据的安全部署理论、方法和关键技术。主要研究内容包括：云计算环境中带安全约束的数据部署优化，云计算环境中支持隐私保护的密文语义搜索，云计算环境中支持多方协同授权的访问控制，云计算环境中基于数字水印的数据权益证明，并最终实现云计算数据安全服务平台原型系统对项目的研究成果进行测试验证。通过项目研究，在云计算环境中数据的利用、共享、权益保护及数据的安全部署等方面取得原创性理论成果和关键技术突破；为云计算环境中数据的安全和用户隐私的保护提供有力的技术支撑；推动我国在云计算安全领域的跨越式发展，为我国抢占云计算科技制高点奠定基础。

云计算代表了信息技术向集约化、规模化与专业化发展的趋势，得到了产业界与科技界的高度重视。然而，云计算环境中数据的安全问题给云计算的普及和发展带来了严峻的挑战，成为制约云计算发展的重要因素。本项目瞄准云计算环境中数据安全的重大需求，深入研究云计算环境中数据的加密、利用、共享及数据的安全部署理论、方法和关键技术。主要研究内容包括：云计算环境中带安全约束的数据部署优化，云计算环境中支持隐私保护的密文语义搜索，云计算环境中支持多方协同授权的访问控制，云计算环境中基于数字水印的数据权益证明，并实现了一个云计算数据安全服务平台原型系统对项目的研究成果进行了测试验证。已申请国家发明专利7项。在国内外重要期刊和学术会议发表论文100多篇，其中IEEE TIFS等信息安全国际顶级期刊10多篇，SCI论文80多篇，ESI高被引论文13篇。已培养博士生8名，硕士生32名。