Records in the Cloud - A Metadata Framework for Cloud Service Providers

摘要

The Records in the Cloud project (http://recordsinthecloud.org/) involves exploring both the benefits and risks of the creation, use, management, storage, long-term preservation and access of records in the "cloud", or virtual computing infrastructure. The research seeks to weigh the risks versus benefits of keeping records in the cloud within Canadian legal, administrative and value systems by exploring questions of confidentiality, security, organizational forensic readiness, information governance, and the ability to prove records' evidentiary capacity by establishing their accuracy, reliability and authenticity. This poster will focus primarily on the project's initiative of establishing a framework for a standard of trust for the cloud, one that guarantees the authenticity, reliability and integrity of the data and records that users entrust to cloud infrastructures. The current goal is to work towards consolidating user interests into one trusted, standardized framework that could be applied by cloud providers as a best practice standard in the design of their infrastructure and the deployment of their services. In this poster we present preliminary results of our research into identifying the provisions that would need to be addressed within such a framework, such as questions of custody, control, and privacy, as well as of integrity, authenticity and reliability.