Design of the Security Mechanism for a BPO Cloud Computing Platform

摘要

The security of a Cloud Computing Platform (CCP) is a key factor in its ability to operate successfully. Currently, the security issues of the physical resource layer and the user application layer of the cloud computing platform have been significantly studied in the field of information security and have already mature products and solutions. This research is aimed at the complex Business Process Outsourcing Cloud Computing Platform (BPO-CCP) for the banking and insurance industries. In particular we are concerned with the BPO-CCP's virtualization security, cloud data security, access control, user authentication and authorization, and cloud computing auditing. This paper analyzes the specific needs of the platform's security. Then the Security Mechanism of the BPO Cloud Computing Platform (SM-BPO-CCP) is designed. During its implementation (around five years at the time of writing) this SM-BPO-CCP that we have designed has efficiently provided security protection for up to twenty BPO companies with each having more than 1000 employees. This SM-BPO-CCP linked to ten large banks and insurance companies, none of which experienced any security issues due to the protection offered by the SM-BPO-CCP.