CT-ISG: Cryptography for Computational Grids

计算网格是一种新兴的基础设施，物理学家、生物学家或天文学家等科学家可以在其中联合强大的远程计算机、传感器和数据库来执行大规模计算。然而，网格产生了许多需要解决的加密和安全问题。本项目旨在为这些通过安全性证明来证明安全性的问题提供实用的解决方案。它将处理许多具体问题。第一个是访问控制，即确保只有经过授权的实体（无论是最终用户还是简单的网格资源）才能访问或修改数据。为了解决这个问题，该项目将提供字典攻击安全、基于密码的身份验证协议。接下来，该项目将考虑发送敏感测量的传感器阵列。为了确保安全，它们将被签名。为了节省带宽，该项目将提供将不同签名压缩成单个压缩签名的方法。（上述方法不适用于此设置。）最后，该项目将考虑通过加密来保护网格数据库上的数据，提供在加密数据库上搜索的机制，这种机制比目前的快得多，特别是与在未加密数据库上搜索的成本大致相同。

The computational grid is an emerging infrastructure in which scientists such as physicists, biologists or astronomers can unite powerful remote computers, sensors and databases to perform large-scale computations. However the grid gives rise to many cryptographic and security problems that need to be addressed. This project aims to provide practical solutions to these problems whose security is justified via proofs of security. It will address numerous specific problems. The first is access control, meaning ensuring that only authorized entities (whether end-users or simply grid resources) can access or modify data. To address this, the project will provide protocols for dictionary-attack safe, password-based authentication. Next, the project will consider sensor arrays that send out sensitive measurements. To ensure security they will be signed. To save bandwidth, the project will provide methods to compress the different signatures into a single compact one. (Previous methods do not apply in this setting.) Finally the project will consider the protection of data on grid databases via encryption, providing mechanisms for searches on encrypted databases that are much faster than current ones, in particular being of about the same cost as search on un-encrypted databases.