Cssp: The Consortium Blockchain Model for Improving the Trustworthiness of Network Software Services

摘要

Untrusted Computing in cloud is the main obstacle to promote cloud computing services, even users get an initial trusted execution environment, the events of dynamic software deployment are easy to cause a risk of compromised system. TTP and ACS are the common strategies to reach an agreement of valid application list and operations, however, extra entity should be added into the origin network and the reliability of system rely on the trust operation of third party.,,,, ,,,, Consider this network computing model, the directly remote controlled security strategy is lacking for terminal users, while the security of user computing applications are controlled by its resources owner like cloud manager which might be not trusted in whole time. In this paper, we address this problem and propose a consortium blockchain based cleanroom security service protocol (CSSP), to track the deployment and usage of the user's software in a secure and tamper-resistant measure, to prevent running of error or illegal software in user computing environment. Unlike the traditional methods, CSSP is a two side protocol: service provider and user computing node, which reduce the redundant safety hazards nodes and its invalidation problem. Consortium Blockchain is an effectively method to reduce the energy consumption and keep the software service protocol between the manager and the user in safety state. The security analysis and evaluation shows that the approach has major potential in trusted network computing system and provide a higher secure level environment for users.