arXivDaily arXiv每日学术速递 周一至周五更新
北美退伍军人节(Veterans Day),12 日无更新
arXiv 1708.03389cs.DCcs.CR
收藏

云联盟的逻辑方法

A Logical Approach to Cloud Federation

Qiang Cao, Yuanjun Yao, Jeff Chase

摘要:

联合云在管理身份、资源访问、命名、连接和对象访问控制方面提出了各种挑战。本文展示了如何使用以数据为中心的方法以全面统一的方式应对这些挑战。我们的方法的基础是一个信任的逻辑,参与者发出认证的声明,主体,对象,属性和关系的逻辑语言,推理声明性的政策规则的基础上。我们将展示如何使用该逻辑来实现云联合的信任基础设施,该基础设施扩展了NSF GENI(联合IaaS测试平台)的模型。它捕获共享身份管理,GENI授权服务,使用L2电路的跨站点互连,以及类似于AWS身份和访问管理(IAM)的命名和访问控制系统,但扩展到没有中央控制的联邦系统。

英文摘要:

Federated clouds raise a variety of challenges for managing identity, resource access, naming, connectivity, and object access control. This paper shows how to address these challenges in a comprehensive and uniform way using a data-centric approach. The foundation of our approach is a trust logic in which participants issue authenticated statements about principals, objects, attributes, and relationships in a logic language, with reasoning based on declarative policy rules. We show how to use the logic to implement a trust infrastructure for cloud federation that extends the model of NSF GENI, a federated IaaS testbed. It captures shared identity management, GENI authority services, cross-site interconnection using L2 circuits, and a naming and access control system similar to AWS Identity and Access Management (IAM), but extended to a federated system without central control.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑