CICI: Data Provenance: Collaborative Research: Provenance Assurance Using Currency Primitives

CICI：数据来源：协作研究：使用货币基元的来源保证

• 批准号: 1821926
• 负责人: Anthony Skjellum
• 金额: $ 18.74万
• 依托单位: University of Tennessee Chattanooga
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2017
• 资助国家: 美国
• 起止时间: 2017-10-01 至 2020-12-31
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=1821926&HistoricalAwards=false
• 关键词: CICI; Data; Provenance; Collaborative; Research

Data provenance is the ability to track data history including things such as where the data resided, who handled it, and what systems stored, forwarded and processed it. This research builds on the architecture of the digital currency Bitcoin. It develops distributed data ledgers - similar to bookkeeping ledgers - that maintain data history so it can't be manipulated by hackers trying to hide their activities. Data consistency guarantees that everyone gets the right answers about where, who, and what regardless of which ledger is read. This software advances the security of computing systems by making data accountable, especially for online commerce and big data ("the cloud''). It secures forensic information taken from compromised computers for further analysis. It validates whether privacy requirements are being met for medical records. The key outcome is a software prototype that implements the complete system and illustrates the ability to store, maintain, and update provenance information for real data. A data provenance framework will be designed, prototyped, evaluated and then delivered as an Application Programmer Interface, software library, and distributed service. This work will produce a reusable distributed service architecture achieving scalability by using distributed services that maintain ledger information. The system leverages Bitcoin cryptocurrency by building on Bitcoin's block-chain architecture to maintain provenance metadata securely. It leverages existing tools for provenance data exploration and visualization. Digital signatures from both the server/system as well as the user creates dual information about possession, while distributed ledgers remove control and maintenance of metadata from the user who creates it. The prototype enables research into long-term provenance creation, maintenance, and utilization for workflows in the area of cybersecurity as well studies of how to integrate and secure provenance into existing file systems and network services. Opt-in and passive (involuntary) provenance systems will be enabled using the API, library, and distributed ledgers prototyped, enabling data provenance for systems where needed, notably high assurance cloud computing and scientific workflow systems. The tool can be used to enable reproducibility of published results from archived data and artifacts.

数据来源是跟踪数据历史的能力，包括数据驻留的位置、处理数据的人以及存储、转发和处理数据的系统。这项研究建立在数字货币比特币的架构之上。它开发了分布式数据分类账——类似于记账分类账——维护数据历史，这样就不会被试图隐藏其活动的黑客操纵。数据一致性保证了每个人都能得到正确的答案，无论读取哪个分类账，都知道在哪里、谁、什么。该软件通过使数据可靠，特别是在线商务和大数据（“云”），提高了计算系统的安全性。它保护从受损计算机中获取的法医信息，以供进一步分析。它验证医疗记录的隐私要求是否得到满足。关键的结果是一个软件原型，它实现了完整的系统，并说明了存储、维护和更新真实数据的来源信息的能力。数据来源框架将被设计、原型化、评估，然后作为应用程序编程接口、软件库和分布式服务交付。这项工作将产生一个可重用的分布式服务架构，通过使用维护分类账信息的分布式服务来实现可扩展性。该系统利用比特币加密货币，建立在比特币的区块链架构上，以安全维护来源元数据。它利用现有工具进行来源数据探索和可视化。来自服务器/系统和用户的数字签名创建了关于所有权的双重信息，而分布式账本从创建元数据的用户那里删除了对元数据的控制和维护。该原型可以研究网络安全领域工作流的长期来源创建、维护和利用，以及如何将来源集成和保护到现有文件系统和网络服务中。使用API、库和分布式分类账原型，可选择和被动（非自愿）溯源系统将被启用，从而为需要的系统提供数据溯源，特别是高保证云计算和科学工作流系统。该工具可用于实现来自存档数据和工件的已发布结果的再现性。