Securely Managing the Lifetime of Versions in Digital Archives

智力价值拟议的研究将开发用于在安全版本控制系统中管理数据生命周期的复杂技术，这是怡安变换的实际应用，它利用了其语义，而不仅仅是其安全属性。还将讨论撤销问题，以完善关键回归技术的安全性和粒度。最近的立法为保留和保护电子信息提出了新的要求。有4000多项州、地方和联邦法案管理档案。每个行为的细节因领域而异，但作为一个整体，它们可以归结为一组技术需求。档案必须为信息提供隐私、机密性和不可否认性。档案必须对磁盘上的数据使用高度加密和身份验证，以及一种安全传输的方法。立法要求对可以在线访问的电子记录进行可审计的更改跟踪，这需要随着时间的推移对数据进行版本管理，并提供对过去版本的访问。政府和企业组织必须确保合规性不会降低安全、隐私或保留策略的执行。监管要求和组织要求的结合为安全版本控制系统带来了两个技术问题。首先，没有安全删除信息的有效方法，即不存在在计算上实用的恢复已删除数据的方法。其次，系统必须提供一种有效的手段来改变信息的可获得性。这包括降低信息等级，例如将信息解密为《信息自由法》的一部分，或者撤销特权，例如在员工离开公司后禁止未来访问信息，或者将医疗记录的权利从一个医疗保健提供者转移到另一个医疗保健提供者。如果没有这些问题的技术解决方案，组织和个人将受到信息泄露的影响，并将无法遵守法规。未安全删除的数据是可恢复的，并会受到传票或加密攻击。在法律规定的保留期之后，信息往往是一种法律责任和竞争责任。此外，一些法规要求根据时间或情况删除个人医疗和财务记录。同样，这种删除必须是永久性的，因此是安全的。用于安全删除和在数据生命周期内限定信息访问范围的现有解决方案是不够的。它们要么达不到要求，要么效率低得令人无法忍受。在这个项目中，将创建新的技术，在版本控制系统中有效地实现安全删除和撤销。将应用全有或全无(AON)加密的新应用，该应用既可对磁盘上的数据提供经过身份验证的强加密，又可率先实现高效的安全删除。影响该项目将导致约翰霍普金斯大学的课程开发，包括一个关于数据存储政策和技术的短期课程。PI将在短期课程的基础上提供三个教程；一个面向政府机构，一个面向医疗保健提供者，还有一个面向企业。教程将通过StorageNetworking.org组织和推广，这是一项针对存储专业人员的教育倡议，将向社区免费提供。拟议的研究将解决最近的立法带来的问题，这些问题影响到金融和医疗组织以及各级政府。由于这些解决方案适用于在不同版本之间共享内容的所有存储系统，因此它们适用于文件系统、分布式归档和数据库。该项目生产的开源软件将允许任何人以很少的费用构建一个合规的、具有安全和删除保证的存储系统。

Intellectual MeritThe proposed research will develop sophisticated techniques for managing the lifetime of data in secure versioning systems, a practical application of the AON transform that leverages its semantics, rather than just its security properties. The problem of revocation will also be addressed in order to refine the security and granularity of key regression techniques.Recent legislation has created new requirements for retaining and securing electronic information. More than 4,000 state, local, and federal acts govern archives. The specifics of each act vary by domain, but, when taken as a whole, they can be distilled down to a set of technical requirements. An archive must provide privacy, confidentiality, and non-repudiation for information. Archives must use strong encryption with authentication for data on disk, as well as a means for secure transmission. Legislation mandates an auditable trail of changes made to electronic records that can be accessed on-line, which requires versioning data over time and providing access to past versions. Governmental and corporate organizations must ensure that compliance does not degrade security, privacy, or the enforcement of retention policies. The combination of regulatory and organizational requirements bring up two technical problems for secure versioning systems. First, there is no efficient way to securely delete information, i.e. so that no computationally practical way to recover deleted data exists. Second, systems must provide an efficient means to change the accessibility of information throughout time. This includes downgrading information, e.g. declassifying information as part of the Freedom of Information Act, or, revoking privileges, e.g. disallowing future access to information after an employee leaves the company or transferring the rights to medical records from one health care provider to another. Without technical solutions to these problems, organizations and individuals will be subject to informationleakage and will fail to comply with regulations. Data that are not securely deleted are recoverable and subject to subpoena or cryptographic attacks. After a legislated retention period, information often represents a legal and competitive liability. Also, some regulations require that personal medical and financial records be deleted based on time or circumstance. Again, this deletion must be permanent, and thus, secure. Existing solutions for secure deletion and for scoping access to information over the lifetime of data are inadequate. They either fail to meet requirements or they are intolerably inefficient. In this project, mew technologies will be created that efficiently implement secure deletion and revocation in versioning systems. A novel application of All-or-Nothing (AON) encryption will be applied that both provides authenticated, strong encryption of data on disk and pioneers efficient secure deletion. ImpactThe project will lead to curriculum development at Johns Hopkins, including a short course on the Policy and Technology in Data Storage. The PIs will offer three tutorials based on the short course; one geared toward governmental agencies, one toward health care providers, and one toward corporations. Tutorials will be organized and promoted through StorageNetworking.org, an initiative for the education of storage professionals and will be freely available to the community. The proposed research will address problems introduced by recent legislation, which effect financial and medical organizations and all levels of government. Because the solutions are general to all storage systems that share content among versions, they apply to file systems, distributed archives, and databases. Open-source software produced by the project will permit anyone to construct a compliantstorage system, with security and deletion guarantees, at little expense.