Nothing Special   »   [go: up one dir, main page]
Skip to main content
Springer Nature Link
Log in

Split key management framework for Open Stack Swift object storage cloud

  • S.I. : Cloud Computing for Scientific and Business Needs
  • Published:
CSI Transactions on ICT Aims and scope Submit manuscript

Abstract

Object storage systems are emerging as new generation service oriented store technologies of large scale data management and delivery in clouds. Recently, several object storage technologies are emerging, one such technology is OpenStack Swift. Swift is based on container services methodology for data organization and retrieval, managed via open standards like web services REST protocols. Swift has several components for data management and retrieval, but, lacks in providing security features (like the key management and encryption) of the data while the data is at rest and in transit. In this paper, we propose a framework for OpenStack Swift key management based on multi-factor split keys, and propose a methodology for key organisation using the document database Mongo DB. First, we describe the object based storage mechanisms in swift, its limitations, followed by key management framework and its components. In this paper we compare the performance of the proposed symmetric-split-key encryption/decryption methodology with the symmetric key, and the performance of the key retrieval when organized in Relational database MySQL and Document database Mongo DB.

This is a preview of subscription content, log in via an institution to check access.

Access this article

Log in via an institution

Subscribe and save

Springer+ Basic
$34.99 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Price excludes VAT (USA)
Tax calculation will be finalised during checkout.

Instant access to the full article PDF.

Institutional subscriptions

Fig. 1
Fig. 2
Fig. 3
Fig. 4
Fig. 5
Fig. 6
Fig. 7
Fig. 8
Fig. 9
Fig. 10

Similar content being viewed by others

References

  1. Growth of unstructured data. http://en.wikipedia.org/wiki/Unstructured_data

  2. Traditional vs Object Storage. http://searchcloudstorage.techtarget.com/tip/Advantages-of-using-an-object-storage-system

  3. Pletka R, Cachin C (2007) Cryptographic security for a high-performance distributed file system. In: Proceedings IEEE 24th conference on mass storage systems and technologies (MSST 2007) San Diego, CA, Sep 2007

  4. Openstack cloud software. http://www.openstack.org/

  5. Openstack swift’s documentation. http://docs.openstack.org/developer/swift/

  6. Zhang N, Kant C (2014) Building cost-effective storage clouds—a metrics-based approach. In: IEEE international conference on cloud engineering (IC2E 14), Boston, USA, Mar 2014

  7. Lu Y, Vlassov V, Navarro L (2014) Towards a community cloud storage. In: IEEE 28th international conference on advanced information networking and applications

  8. Openstack Keystone documentation. http://docs.openstack.org/developer/keystone/

  9. Hassinen M, Mussalo P (2005) Client controlled security for web applications. In: Proceedings IEEE 30th conference on local computer networks (LCN’05) Sydney, NSW, Nov 2005

  10. Amazon simple storage service. http://aws.amazon.com/s3/

  11. Windows Azure™ Security Overview. http://www.utdallas.edu/~muratk/courses/cloud11f_files/Windows%20Azure%20Security%20Overview%20v 1.01.pdf

  12. Kaaniche N, Laurent M (2014) A secure client side deduplication scheme in cloud storage environments. In: IEEE 6th international conference on new technologies, mobility and security (NTMS)

  13. Ayache M, Erradi M, Freisleben B (2015) Access control policies enforcement in a cloud environment: openstack. In: IEEE 11th international conference on information assurance and security (IAS)

  14. Moghaddam FF, Karimi O, Alrashdan MT (2013) A comparative study of applying real-time encryption in cloud computing environments. In: Proceedings IEEE 2nd international conference on cloud networking (CloudNet 2013), SanFrancisco, USA, Nov 2013

  15. Python tutorial. https://docs.python.org/2/library/os.html

  16. Urandom. http://stupefydeveloper.blogspot.in/2007/12/random-vs-urandom.html

  17. Implementing Encryption Architecture with Cisco Webex for OpenStack Swift object storage. https://www.mirantis.com/blog/openstack-swift-encryption-architecture/

Download references

Author information

Authors and Affiliations

  1. Department of Information Technology, G. Narayanamma Institute of Technology and Science, Hyderabad, India

    Surekha Thota & Ravi Prakash Reddy Induri

  2. Advanced Data Processing Research Institute, Department of Space, Secunderabad, India

    Raghavendra Kune

Authors
  1. Surekha Thota
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Ravi Prakash Reddy Induri
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Raghavendra Kune
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Surekha Thota.

Rights and permissions

Reprints and permissions

About this article

Check for updates. Verify currency and authenticity via CrossMark

Cite this article

Thota, S., Induri, R.P.R. & Kune, R. Split key management framework for Open Stack Swift object storage cloud. CSIT 5, 397–406 (2017). https://doi.org/10.1007/s40012-017-0166-8

Download citation

  • Received:

  • Accepted:

  • Published:

  • Issue Date:

  • DOI: https://doi.org/10.1007/s40012-017-0166-8

Keywords

Search

Navigation