Architecture to Implement Secure Cloud Computing with Elliptic Curve Cryptography

Debajyoti Mukhopadhyay,Abhay kawade,Akash Thakur,Nikhilesh Chaudhari,Sani Nanekar 한국산학기술학회 2015 SmartCR Vol.5 No.3

Cloud computing is an emerging domain that enables the deployment of a new IT service paradigm. Cloud providers offer a wide range of services which are charged per unit basis. The major challenge facing clouds is security. It includes ensuring the safety of the infrastructure as well as protection against unauthorized access. In this paper, we deal with cloud security services, including key agreements and authentication. By employing Elliptic Curve Cryptography for client authentication process and data storage, we design the Multi-Server Cloud Computing system. Our scheme chooses not to store encryption keys anywhere in the cloud because of the secret isolation guideline. A request counter is used at the time of the client authentication process to prevent replay attacks. To aid in controlled access, a mandatory access control model is preferred. We split the encrypted data and store it on different clouds, which provides security against attacks on the storage server. Restrictions are imposed to ensure only selected employees (administrators) have authority to handle the encrypted data. Our Multi-Server Cloud Computing system is used to fit an environment in which each cloud contains multiple servers that collaborate in serving applications. One cloud is used for client authentication and key agreement, and another cloud for data splitting and combining. Due to strong security and operation efficiency, the proposed secure cloud computing should be most suitable for use in a cloud computing environment.

Efficient Server Virtualization using Grid Service Infrastructure

백성진,박선미,양수현,송은하,정영식 한국정보처리학회 2010 Journal of information processing systems Vol.6 No.4

The core services in cloud computing environment are SaaS (Software as a Service), Paas (Platform as a Service) and IaaS (Infrastructure as a Service). Among these three core services server virtualization belongs to IaaS and is a service technology to reduce the server maintenance expenses. Normally, the primary purpose of sever virtualization is building and maintaining a new well functioning server rather than using several existing servers, and in improving the various system performances. Often times this presents an issue in that there might be a need to increase expenses in order to build a new server. This study intends to use grid service architecture for a form of server virtualization which utilizes the existing servers rather than introducing a new server. More specifically, the proposed system is to enhance system performance and to reduce the corresponding expenses, by adopting a scheduling algorithm among the distributed servers and the constituents for grid computing thereby supporting the server virtualization service. Furthermore, the proposed server virtualization system will minimize power management by adopting the sleep severs, the subsidized servers and the grid infrastructure. The power maintenance expenses for the sleep servers will be lowered by utilizing the ACPI (Advanced Configuration & Power Interface) standards with the purpose of overcoming the limits of server performance.

Efficient Server Virtualization using Grid Service Infrastructure

Baek, Sung-Jin,Park, Sun-Mi,Yang, Su-Hyun,Song, Eun-Ha,Jeong, Young-Sik Korea Information Processing Society 2010 Journal of information processing systems Vol.6 No.4

The core services in cloud computing environment are SaaS (Software as a Service), Paas (Platform as a Service) and IaaS (Infrastructure as a Service). Among these three core services server virtualization belongs to IaaS and is a service technology to reduce the server maintenance expenses. Normally, the primary purpose of sever virtualization is building and maintaining a new well functioning server rather than using several existing servers, and in improving the various system performances. Often times this presents an issue in that there might be a need to increase expenses in order to build a new server. This study intends to use grid service architecture for a form of server virtualization which utilizes the existing servers rather than introducing a new server. More specifically, the proposed system is to enhance system performance and to reduce the corresponding expenses, by adopting a scheduling algorithm among the distributed servers and the constituents for grid computing thereby supporting the server virtualization service. Furthermore, the proposed server virtualization system will minimize power management by adopting the sleep severs, the subsidized servers and the grid infrastructure. The power maintenance expenses for the sleep servers will be lowered by utilizing the ACPI (Advanced Configuration & Power Interface) standards with the purpose of overcoming the limits of server performance.

Efficient Server Virtualization using Grid Service Infrastructure

( Sung Jin Baek ),( Sun Mi Park ),( Su Hyun Yang ),( Eun Ha Song ),( Young Sik Jeong ) 한국정보처리학회 2010 Journal of information processing systems Vol.6 No.4

The core services in cloud computing environment are SaaS (Software as a Service), Paas (Platform as a Service) and IaaS (Infrastructure as a Service). Among these three core services server virtualization belongs to IaaS and is a service technology to reduce the server maintenance expenses. Normally, the primary purpose of sever virtualization is building and maintaining a new well functioning server rather than using several existing servers, and in improving the various system performances. Often times this presents an issue in that there might be a need to increase expenses in order to build a new server. This study intends to use grid service architecture for a form of server virtualization which utilizes the existing servers rather than introducing a new server. More specifically, the proposed system is to enhance system performance and to reduce the corresponding expenses, by adopting a scheduling algorithm among the distributed servers and the constituents for grid computing thereby supporting the server virtualization service. Furthermore, the proposed server virtualization system will minimize power management by adopting the sleep severs, the subsidized servers and the grid infrastructure. The power maintenance expenses for the sleep servers will be lowered by utilizing the ACPI(Advanced Configuration & Power Interface) standards with the purpose of overcoming the limits of server performance.

Application of Clouds Computing Assisted Instruction to Mobile Learning Activities

Xin Liu 보안공학연구지원센터 2015 International Journal of Grid and Distributed Comp Vol.8 No.6

The limitation of terminal equipment and the scarcity of mobile learning resource are key constrains of mobile learning development. However, cloud computing supplies a new way of solving the problem. For cloud computing, the calculation and the storage of task are conducted in the cloud server. As a result, computing and storage work of mobile phone are separated from the machine. So user can customize through cloud computing services according to personal need. Thus a lot of works that are realized only in high-performance computers before, but now can be finished through the mobile phones with poor configuration. This paper through theoretical study and based on the theory of mobile learning and cloud computing, it points out the disadvantages of mobile learning and puts forward the solution of cloud computing technology.

Method of Calculating the Server Capacity for Cloud Computing for SaaS

Kook-Hyun Choi,Yang-Ha Chun,Se-Jeong Park,Jeawon Park,Yongtae Shin,Jong-Bae Kim 보안공학연구지원센터 2015 International Journal of Software Engineering and Vol.9 No.11

Thanks to today's computing environment, where it is like IT is cloud, and cloud is IT, the importance of calculating the system performance and capacity is gaining more and more weight. More importantly, since cloud computing requires a significant amount of server resources, it is most important to calculate the capacity of the hardware in a systematic and accurate manner. Also, the technology is advancing rapidly to its maturity. Particularly, many IT companies in Korea have entered into MOUs with companies that have already established their cloud infrastructure and provide SaaS. Therefore, the studies on calculation methods on hardware capacities for SaaS is the most essential part of the cloud service and forms the foundation for future expansions to various businesses within the cloud. For this reason, this study provides the methods and criteria for calculating the capacity of hardware based on SaaS. The results of this study may be used as guidelines for calculating the capacities for HW when establishing a cloud computing environment in the future.

An improved Multi-server Authentication Scheme for Distributed Mobile Cloud Computing Services

( Azeem Irshad ),( Muhammad Sher ),( Hafiz Farooq Ahmad ),( Bander A. Alzahrani ),( Shehzad Ashraf Chaudhry ),( Rahul Kumar ) 한국인터넷정보학회 2016 KSII Transactions on Internet and Information Syst Vol.10 No.12

Mobile cloud computing (MCC) has revolutionized the way in which the services can be obtained from the cloud service providers. Manifold increase in the number of mobile devices and subscribers in MCC has further enhanced the need of an efficient and robust authentication solution. Earlier, the subscribers could get cloud-computing services from the cloud service providers only after having consulted the trusted third party. Recently, Tsai and Lo has proposed a multi-server authenticated key agreement solution for MCC based on bilinear pairing, to eliminate the trusted third party for mutual authentication. The scheme has been novel as far as the minimization of trusted party involvement in authenticating the user and service provider, is concerned. However, the Tsai and Lo scheme has been found vulnerable to server spoofing attack (misrepresentation attack), de-synchronization attack and denial-of-service attack, which renders the scheme unsuitable for practical deployment in different wireless mobile access networks. Therefore, we have proposed an improved model based on bilinear pairing, countering the identified threats posed to Tsai and Lo scheme. Besides, the proposed work also demonstrates performance evaluation and formal security analysis.

클라우드와 P2P 하이브리드 구조의 MMOG를 위한 대역폭 조정 기법

김진환 한국인터넷방송통신학회 2024 한국인터넷방송통신학회 논문지 Vol.24 No.3

P2P와 클라우드 컴퓨팅의 기술적 장점이 결합된 하이브리드 구조에서는 효율적인 자원의 공급과 부하의 배분이가능하다. 즉 P2P를 구성하는 플레이어들의 처리 능력과 클라우드 컴퓨팅 환경에 있는 서버의 처리 능력을 적절하게활용함으로써 경제적 비용과 서비스 품질의 규모를 고려하는 MMOG를 구성할 수 있다. 실제로 클라우드에 존재하는서버의 컴퓨팅 능력과 통신 대역폭은 중요한 요구형 자원이며 임차를 많이 할수록 비용이 증가하는 대신 서비스 품질은향상된다. 반면 플레이어의 처리 능력을 많이 활용하면 서비스 품질은 상대적으로 저하되는 대신 경제적 비용은 감소하게 된다. 본 논문에서는 이러한 하이브리드 구조 기반의 MMOG를 위한 서버와 플레이어들 간의 대역폭 조정 기법이기술된다. 동시에 실행되는 플레이어들의 수가 증가할 때 플레이어들의 요청 행위를 서버와 플레이어들에게 적절히 분배하여 서버의 컴퓨팅 능력과 통신량을 효과적으로 활용하는 기법이 본 논문에서 기술된다. 시뮬레이션 결과 클라우드와P2P 하이브리드 구조에 기반한 MMORPG에서 플레이어들이 직접 처리하는 대역폭이 증가할수록 서버의 대역폭이 비례하여 감소되는 결과가 나타났다. In a hybrid architecture that combines the technological advantages of P2P(peer-to-peer) and cloud computing, it is possible to efficiently supply resources and allocate loads. In other words, by appropriately utilizing the processing power of the players constituting P2P as well as the server in the cloud computing environment, MMOG(Massively Multiplayer Online Game) can be configured that considers the scale of economic cost and service quality. In fact, the computing power and communication bandwidth of servers in the cloud are important demand-based resources. The more it is used when renting, the higher the cost, while the quality of service improves. On the other hand, if the player's processing power is utilized a lot, the quality of service deteriorates relatively while the economic cost decreases. In this paper, a bandwidth adjustment technique between servers and players for MMOG based on this hybrid structure is described. When the number of players running at the same time increases, the players' actions are appropriately distributed to servers and players to effectively utilize the server's computing power and communication volume. Simulation results show that in the MMOG based on cloud and P2P hybrid architecture, the bandwidth of the server is proportionally decreased as the bandwidth directly handled by players is increased.

JSP 서버를 이용한 음성 통신 안드로이드 앱의 구현

백건효 ( Keon Hyo Baek ) (주)엘지씨엔에스(구 LGCNS 엔트루정보기술연구소) 2012 Entrue Journal of Information Technology Vol.11 No.3

스마트폰이 출시되면서 다양한 앱 개발에 대한 요구가 증가하고 있으며, 웹과 앱을 연동한 멀티미디어 서비스에 대한 관심이 높아지고 있다. 웹 서버의 서버 DB를 활용한 산업체의 멀티미디어 서비스 요구에 맞춰 MySQL DB와 JSP 서버를 이용하여 실시간 음성통신 앱을 구현하였다. 음성데이터의 도착 알림을 실시간으로 지원하기 위해 GCM(Google Cloud Messaging) System에서 제공하는 API를 사용하였다. 녹음된 음성파일은 JSP 웹 서버에 ‘Voice Record Folder’ 에 저장되고, 음성파일의 정보는 MySQL DB에 저장된다. JSP 서버의 기능 중 하나인 ‘Push’ 기능이 새로운 음성 메세지의 실시간 도착을 알린다. 스마트 폰에서 직접적으로 서버 DB에 접근할 수 있도록 드라이버가 제공되지 않기 때문에 클라이언트에서 웹 서버로 접속하도록 미들웨어를 개발하였다. ‘스마트음성통신’ 앱은 자바 JDK, 안드로이드 SDK, JSP, 자바 빈의 모든 컴포넌트들을 자바 베이스로 구현함으로써 모든 플랫폼에 독립적이어서 최대한 이식성을 높혔다. 또한 3G 망 보다는 WiFi에서 음성메세지 전송속도가 빨라(30%) 경제적인 이유로 WiFi를 선호하는 사용자에게 많이 사용될 것이다. Since smart phone has enhanced various app developments demand is increasing and multimedia that connects web with app is getting lots of attention. To satisfy needs in multimedia service using web server for industry, we developed real-time voice communication app with MySQL DB and JSP server. To notice users the arrival of message, GCM(Google Cloud Messaging) system`s API is used. Record file is saved in ``voice record folder`` in JSP web server and information of the file is saved in MySQL DB. One of JSP server`s function ``Push`` tells you that new message has been arrived in real time. Since smart Phone doesn`t offer driver to contact server DB, I have developed a middle ware that connects a client to the web server. ``Smart voice communication`` app uses all the component of java JDK, android SDK, JSP, java bean, so it is independent to platform and it`s portability is very high. And voice message deliver speed it 30% faster in WiFi zone than using 3G network, so it will be for people who prefer WiFi for economic reason.

An improved Multi-server Authentication Scheme for Distributed Mobile Cloud Computing Services

Irshad, Azeem,Sher, Muhammad,Ahmad, Hafiz Farooq,Alzahrani, Bander A.,Chaudhry, Shehzad Ashraf,Kumar, Rahul Korean Society for Internet Information 2016 KSII Transactions on Internet and Information Syst Vol.10 No.12

Mobile cloud computing (MCC) has revolutionized the way in which the services can be obtained from the cloud service providers. Manifold increase in the number of mobile devices and subscribers in MCC has further enhanced the need of an efficient and robust authentication solution. Earlier, the subscribers could get cloud-computing services from the cloud service providers only after having consulted the trusted third party. Recently, Tsai and Lo has proposed a multi-server authenticated key agreement solution for MCC based on bilinear pairing, to eliminate the trusted third party for mutual authentication. The scheme has been novel as far as the minimization of trusted party involvement in authenticating the user and service provider, is concerned. However, the Tsai and Lo scheme has been found vulnerable to server spoofing attack (misrepresentation attack), de-synchronization attack and denial-of-service attack, which renders the scheme unsuitable for practical deployment in different wireless mobile access networks. Therefore, we have proposed an improved model based on bilinear pairing, countering the identified threats posed to Tsai and Lo scheme. Besides, the proposed work also demonstrates performance evaluation and formal security analysis.