Securely Managing the Lifetime of Versions in Digital Archives

建议的研究将开发用于管理安全版本控制系统中数据生命周期的复杂技术，这是利用其语义而不仅仅是其安全属性的AON转换的实际应用。为了改进关键回归技术的安全性和粒度，还将讨论撤销问题。最近的立法对保留和保护电子信息提出了新的要求。超过4000个州、地方和联邦法案管理着档案。每个行为的细节因领域而异，但是，当作为一个整体时，它们可以被提炼成一组技术需求。档案必须提供信息的隐私性、保密性和不可否认性。归档文件必须对磁盘上的数据进行强加密和身份验证，以及安全传输的手段。立法要求对可在线访问的电子记录进行可审计的更改跟踪，这需要随时间对数据进行版本控制，并提供对过去版本的访问。政府和公司组织必须确保遵从性不会降低安全性、隐私性或保留策略的执行。监管和组织需求的结合为安全版本控制系统带来了两个技术问题。首先，没有有效的安全删除信息的方法，即没有计算上可行的方法来恢复被删除的数据。其次，系统必须提供一种有效的手段来随时改变信息的可访问性。这包括降低信息的等级，例如根据《信息自由法》对信息进行解密，或撤销特权，例如在员工离开公司后不允许再访问信息，或将医疗记录的权利从一个医疗保健提供者转移到另一个医疗保健提供者。如果没有对这些问题的技术解决方案，组织和个人将受到信息泄露的影响，无法遵守法规。未被安全删除的数据是可恢复的，并受到传票或加密攻击。在法定保留期之后，信息通常代表法律和竞争责任。此外，一些法规要求根据时间或情况删除个人医疗和财务记录。同样，这种删除必须是永久性的，因此是安全的。用于安全删除和确定数据生命周期内对信息的访问范围的现有解决方案是不够的。它们要么不能满足要求，要么效率低得令人无法容忍。在这个项目中，将创建新技术，在版本控制系统中有效地实现安全删除和撤销。一种全新的全有或全无（AON）加密应用将被应用，它既提供了对磁盘上数据的身份验证、强加密，又开创了高效安全删除的先机。该项目将推动约翰霍普金斯大学的课程发展，包括一门关于数据存储政策和技术的短期课程。pi将在短期课程的基础上提供三门教程；一个面向政府机构，一个面向医疗保健提供者，还有一个面向公司。教程将通过StorageNetworking.org组织和推广，这是一个为存储专业人员提供教育的倡议，并将免费提供给社区。拟议的研究将解决最近立法带来的问题，这些问题影响到金融和医疗机构以及各级政府。由于这些解决方案适用于所有在不同版本之间共享内容的存储系统，因此它们适用于文件系统、分布式归档和数据库。该项目生产的开源软件将允许任何人以很少的成本构建一个兼容的存储系统，具有安全性和删除保证。

Intellectual MeritThe proposed research will develop sophisticated techniques for managing the lifetime of data in secure versioning systems, a practical application of the AON transform that leverages its semantics, rather than just its security properties. The problem of revocation will also be addressed in order to refine the security and granularity of key regression techniques.Recent legislation has created new requirements for retaining and securing electronic information. More than 4,000 state, local, and federal acts govern archives. The specifics of each act vary by domain, but, when taken as a whole, they can be distilled down to a set of technical requirements. An archive must provide privacy, confidentiality, and non-repudiation for information. Archives must use strong encryption with authentication for data on disk, as well as a means for secure transmission. Legislation mandates an auditable trail of changes made to electronic records that can be accessed on-line, which requires versioning data over time and providing access to past versions. Governmental and corporate organizations must ensure that compliance does not degrade security, privacy, or the enforcement of retention policies. The combination of regulatory and organizational requirements bring up two technical problems for secure versioning systems. First, there is no efficient way to securely delete information, i.e. so that no computationally practical way to recover deleted data exists. Second, systems must provide an efficient means to change the accessibility of information throughout time. This includes downgrading information, e.g. declassifying information as part of the Freedom of Information Act, or, revoking privileges, e.g. disallowing future access to information after an employee leaves the company or transferring the rights to medical records from one health care provider to another. Without technical solutions to these problems, organizations and individuals will be subject to informationleakage and will fail to comply with regulations. Data that are not securely deleted are recoverable and subject to subpoena or cryptographic attacks. After a legislated retention period, information often represents a legal and competitive liability. Also, some regulations require that personal medical and financial records be deleted based on time or circumstance. Again, this deletion must be permanent, and thus, secure. Existing solutions for secure deletion and for scoping access to information over the lifetime of data are inadequate. They either fail to meet requirements or they are intolerably inefficient. In this project, mew technologies will be created that efficiently implement secure deletion and revocation in versioning systems. A novel application of All-or-Nothing (AON) encryption will be applied that both provides authenticated, strong encryption of data on disk and pioneers efficient secure deletion. ImpactThe project will lead to curriculum development at Johns Hopkins, including a short course on the Policy and Technology in Data Storage. The PIs will offer three tutorials based on the short course; one geared toward governmental agencies, one toward health care providers, and one toward corporations. Tutorials will be organized and promoted through StorageNetworking.org, an initiative for the education of storage professionals and will be freely available to the community. The proposed research will address problems introduced by recent legislation, which effect financial and medical organizations and all levels of government. Because the solutions are general to all storage systems that share content among versions, they apply to file systems, distributed archives, and databases. Open-source software produced by the project will permit anyone to construct a compliantstorage system, with security and deletion guarantees, at little expense.