Integrated Infrastructure for Secure and Efficient Long-Term Data Management

为了达到法律或行业标准日益要求的企业数据的安全和隐私级别，应对静态数据和传输中的数据进行加密。然而，最近因丢失或被盗档案磁带或笔记本电脑而发生的多起侵犯隐私的事件表明，如今大多数数据，即使是极其敏感的数据，也没有加密。主要原因是我们没有一个灵活的密钥管理系统。丢失加密密钥(由于记忆失误、工作人员死亡或存储的副本被销毁)将意味着数据的所有者实际上将完全丢失它，潜在的灾难性后果。该项目将开发一个高性能的长期数据管理系统，以确保在数据集的整个生命周期中达到必要的安全级别。目标是一种基于分层集群的档案存储解决方案，它将提供：(1)透明的备份、恢复和数据访问操作，使各个应用程序和业务实体能够安全高效地将数据存档数十年；(2)在集群计算环境中实现高性能的数据访问；(3)有效确保长期数据安全和可访问性的创新技术，包括长期密钥管理。该解决方案将适用于各种计算环境，包括高性能计算(HPC)社区的极高吞吐量环境。

To achieve the level of security and privacy for enterprise data that is increasingly required by laws or industry standards, data should be encrypted both at rest and in transit. Yet, numerous recent privacy breaches through loss or theft of archival tapes or notebook computers show that today most data, even of extremely sensitive nature, is not encrypted. The main reason is that we do not have a flexible system for key management. Loss of the encryption key (through lapses of memory, death of staff members, or destruction of stored copies) would mean that the owner of the data would effectively lose it completely, with potentially catastrophic consequences. This project will develop a high-performance long-term data management system that will ensure the necessary levels of security throughout the lifecycle of a data set. The goal is a hierarchical cluster-based archival storage solution that will provide: (i) transparent backup, restore, and data access operations that will allow individual application programs and business entities to securely and efficiently archive data for decades; (ii) high-performance data access in a cluster computing environment; and (iii) innovative techniques for efficiently ensuring long-term data security and accessibility, including long-term key management. The solution will be suitable for heterogeneous computing environments, including the extremely high-throughput ones of the high-performance computing (HPC) community.