CT-ISG: Cryptography for Computational Grids

CT-ISG：计算网格密码学

• 批准号: 0627779
• 负责人: Mihir Bellare
• 金额: $ 30万
• 依托单位: University of California-San Diego
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2006
• 资助国家: 美国
• 起止时间: 2006-09-01 至 2010-08-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0627779&HistoricalAwards=false
• 关键词: CT; ISG; Cryptography; Computational; Grids

The computational grid is an emerging infrastructure in which scientists such as physicists, biologists or astronomers can unite powerful remote computers, sensors and databases to perform large-scale computations. However the grid gives rise to many cryptographic and security problems that need to be addressed. This project aims to provide practical solutions to these problems whose security is justified via proofs of security. It will address numerous specific problems. The first is access control, meaning ensuring that only authorized entities (whether end-users or simply grid resources) can access or modify data. To address this, the project will provide protocols for dictionary-attack safe, password-based authentication. Next, the project will consider sensor arrays that send out sensitive measurements. To ensure security they will be signed. To save bandwidth, the project will provide methods to compress the different signatures into a single compact one. (Previous methods do not apply in this setting.) Finally the project will consider the protection of data on grid databases via encryption, providing mechanisms for searches on encrypted databases that are much faster than current ones, in particular being of about the same cost as search on un-encrypted databases.

计算网格是一种新兴的基础设施，物理学家、生物学家或天文学家等科学家可以在其中联合强大的远程计算机、传感器和数据库来执行大规模计算。然而，网格带来了许多需要解决的密码和安全问题。该项目旨在为这些问题提供实用的解决方案，这些问题的安全性通过安全性证明是合理的。它将解决许多具体问题。第一个是访问控制，这意味着确保只有授权实体(无论是最终用户还是简单的网格资源)才能访问或修改数据。为了解决这个问题，该项目将提供字典攻击安全的、基于密码的身份验证协议。下一步，该项目将考虑发送敏感测量的传感器阵列。为了确保安全，他们将被签署。为了节省带宽，该项目将提供将不同的签名压缩成单个紧凑签名的方法。(以前的方法不适用于此设置。)最后，该项目将考虑通过加密来保护网格数据库上的数据，为在加密数据库上进行搜索提供比当前数据库快得多的机制，特别是与在未加密数据库上进行搜索的成本大致相同。