A case for the cloud storage system supporting sensitive data application

摘要

With more and more users are willing to store their data in the cloud storage system, while they get many benefits from the cloud, their data faces potential serious security threats, especially about the sensitive data applications. In this paper, we analyze the unique security requirements of the sensitive data application in the cloud, and we propose improved structure for the typical cloud storage system architecture. The hardware USBKey is introduced to the architecture for purpose of enhancing user identity security and interaction security between the users and the cloud storage system. Moreover, drawn on the idea of data active protection, a data security container is introduced to the system to enhancing the security of the data transmission process; by encapsulating the encrypted data, increasing appropriate access control and data management functions, we turn the static data blocks into a dynamic executable data security container. Then, we design security enhanced cloud storage terminal software architecture to adapt to the user's specific requirements, and its functions and components can be customizable; moreover, the architecture can detect whether the execution environment is accord with the pre-defined environment requirements.