CICI: Data Provenance: Collaborative Research: Provenance Assurance Using Currency Primitives

CICI：数据来源：协作研究：使用货币基元的来源保证

• 批准号: 1547164
• 负责人: Richard Brooks
• 金额: $ 24.99万
• 依托单位: Clemson University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2016
• 资助国家: 美国
• 起止时间: 2016-01-01 至 2019-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1547164&HistoricalAwards=false
• 关键词: CICI; Data; Provenance; Collaborative; Research

Data provenance is the ability to track data history including things such as where the data resided, who handled it, and what systems stored, forwarded and processed it. This research builds on the architecture of the digital currency Bitcoin. It develops distributed data ledgers - similar to bookkeeping ledgers - that maintain data history so it can't be manipulated by hackers trying to hide their activities. Data consistency guarantees that everyone gets the right answers about where, who, and what regardless of which ledger is read. This software advances the security of computing systems by making data accountable, especially for online commerce and big data ("the cloud''). It secures forensic information taken from compromised computers for further analysis. It validates whether privacy requirements are being met for medical records. The key outcome is a software prototype that implements the complete system and illustrates the ability to store, maintain, and update provenance information for real data. A data provenance framework will be designed, prototyped, evaluated and then delivered as an Application Programmer Interface, software library, and distributed service. This work will produce a reusable distributed service architecture achieving scalability by using distributed services that maintain ledger information. The system leverages Bitcoin cryptocurrency by building on Bitcoin's block-chain architecture to maintain provenance metadata securely. It leverages existing tools for provenance data exploration and visualization. Digital signatures from both the server/system as well as the user creates dual information about possession, while distributed ledgers remove control and maintenance of metadata from the user who creates it. The prototype enables research into long-term provenance creation, maintenance, and utilization for workflows in the area of cybersecurity as well studies of how to integrate and secure provenance into existing file systems and network services. Opt-in and passive (involuntary) provenance systems will be enabled using the API, library, and distributed ledgers prototyped, enabling data provenance for systems where needed, notably high assurance cloud computing and scientific workflow systems. The tool can be used to enable reproducibility of published results from archived data and artifacts.

数据出处是跟踪数据历史的能力，包括数据所在的位置，谁处理它，以及什么系统存储，转发和处理它。这项研究建立在数字货币比特币的架构上。它开发了分布式数据分类账-类似于簿记分类账-维护数据历史，因此无法被试图隐藏其活动的黑客操纵。数据一致性保证了每个人都能得到关于在哪里、谁和什么的正确答案，而不管读的是哪个分类账。 该软件通过使数据负责来提高计算系统的安全性，特别是对于在线商务和大数据（“云”）。 它可以保护从受损计算机中获取的法医信息，以便进一步分析。它验证医疗记录是否满足隐私要求。 关键的成果是一个软件原型，实现了完整的系统，并说明了存储，维护和更新起源信息的真实的数据的能力。数据起源框架将被设计、原型化、评估，然后作为应用程序接口、软件库和分布式服务交付。这项工作将产生一个可重用的分布式服务架构，通过使用维护账本信息的分布式服务来实现可扩展性。该系统通过构建比特币的区块链架构来利用比特币加密货币，以安全地维护出处元数据。它利用现有工具进行来源数据探索和可视化。 来自服务器/系统以及用户的数字签名创建了关于所有权的双重信息，而分布式账本从创建它的用户那里删除了对元数据的控制和维护。该原型可以研究网络安全领域工作流的长期来源创建，维护和利用，以及研究如何将来源集成和保护到现有的文件系统和网络服务中。 将使用API、库和分布式分类账原型来启用选择性和被动（非自愿）来源系统，从而在需要时为系统（特别是高保证云计算和科学工作流系统）启用数据来源。该工具可用于使已发布的结果从存档的数据和工件的再现性。