基于安全Agent的可信云计算与对等计算融合模型及关键技术的研究

目前的云计算只考虑服务器端的计算能力和存储资源，忽视了网络边缘的潜在资源。申请人领导的课题组创新性地将云计算模型扩展为云计算与对等计算融合模型（Cloud-P2P），充分聚集网络服务器端和网络边缘终端上的海量资源，从而获得更高的成本效益。在动态、开放的Cloud-P2P计算环境中联合跨组织和管理域的节点来合作完成大规模的计算任务，带来了新的问题：主体行为不可靠，计算和数据的安全可信性以及执行效率都难以保障。本项目重点研究基于安全Agent的可信Cloud-P2P计算融合模型，并对多租客环境下的计算与数据的私密性保护和自销毁机制、执行体与执行点安全可信性评价机制及执行策略和大规模、异构计算环境下的协同管理监控机制展开深入研究，并构建平台及应用系统。本项目的研究成果将进一步保证Cloud-P2P的安全可信性，对目前的云计算及其它分布式计算系统的安全与可信机制的研究与构建也具有良好的参考价值。

The current Cloud computing only considers the server-side computing power and storage resources, ignoring the potential network edge resources. Our research team innovatively extent the Cloud computing model to Cloud-P2P, an integrated model of Cloud computing and P2P computing, in order to aggregate the wider range of network server and edge resources with higher cost-effectiveness. Nodes in dynamic, open Cloud-P2P computing environments belonging to different owners cooperate to complete large-scale computing tasks, which brings new problems: object's behaviors are not reliable; the security, the credibility and the efficiency of computing and data process are difficult to protect..The object of this research proposal is to adopt the secure-agent technology to construct an trustworthy Cloud-P2P model. The main research points include the task and data privacy protection and self-destruction mechanism for multi-tenant environments, the task executing Agent and task executor node security and credibility evaluation mechanism and implementation strategy, the collaborative management and monitoring mechanism of large-scale and heterogeneous computing environments and the prototype platform and applications construction. The research results of this project will further ensure the security and credibility of Cloud-P2P systems, and also has good reference values to the research and construction of the security and credibility protection mechanism of Cloud and other distributed systems.