Inter-Cloud Computing and Networking for Secure Social Infrastructure

Transcription

1 Inter-Cloud Computing and ing for Secure Social Infrastructure Atsuhiro GOTO Institute of Information Security (IISEC) Global Inter-Cloud Technology Forum (GICTF) 1 Who am I? Atsuhiro Goto is currently Professor of Graduate School of Information Security, Institute of Information Security (IISEC). Goto has been with NTT R&D for more than 25 years and has made significant contributions on several cutting-edge business developments. Goto has also contributed to global standardization as vice chair of the Global Inter-Cloud Technology Forum (GICTF). Goto received a PhD degree from University of Tokyo in He has been a member of the IEEE Computer Society Board of Governors since

2 Institute of Information Security (IISEC) President Prof. Tanaka Graduate School Information Security Department Information Security Program Master's Program Doctoral Program Degree Master's Degree in Informatics Ph. D. in Informatics Quota 40 students/year 8 students/year Length of study 2 years 1 year 3 years Required credit 30 credits or more 46 credits or more 8 credits or above 3 Model Courses [[For Legal and For Governance (CT) (LG) Engineer Technology Security Professional and Risk Experts ]Management system (MS) Managers and Managements ]consultants Crypto Technology System Design (SD) business consultants <Alumni> IT industries / Security venders/ Think tank / Consulting Firms / Finance / Retails/ Media and publishing / Education / Government / Defense and others 4

3 Security Experts Aiming Security Experts from Industry and Governments (60%+) Toward future CIO/CISO In this meeting Ms. Rika Hayashi from E-Learning venture Mr. Takamichi Asou, developing new sensor services in NTT East Mr. Hiroki Hada working at SOC, NTT Communications 6

4 Agenda Cloud Evolution Inter-Cloud for Life-line Services Inter-Cloud technology Development & GICTF overview Summary 7 CLOUD EVOLUTION 8

5 Clouds Today Individual End User Students Residents Employee, Officials Internet Users Aims and Needs as Cloud Users (Enterprise) Web-scale Services Twitter Facebook Zynga Elasticity, Agility, On-demand self services College Mail System On-line Shops Local Gov. System Decrease CAPEX/OPEX Small Env. footprint Government Systems Large Enterprises SaaS AP DB consolidation Cloud Systems IaaS PaaS PF Integration Resource Sharing Public Cloud Private Cloud 9 Cloud Application and Requirement Today Mission Critical (Gov., Medical, etc) Safe and Secure, Disaster-tolerant Highly Reliable More Secure Enterprise (CRM, SFA, etc) Individual (SNS, games) On-demand, Low- Cost, Agility, etc. Fun, Easy-to-use, etc. Huge Resource Lower Cost 10

6 Evolution of Cloud Computing Single Cloud (~2010~) Hybrid Cloud (~2011~) Inter Cloud (2013~ ) Private Cloud Gov. Large Ent. Public Cloud Private Cloud Gov. Large Ent. Public Cloud Private Cloud Public Cloud Public Cloud Inter-Cloud Private Cloud 11 INTER-CLOUD FOR LIFE-LINE SERVICES 12

7 Lessons learned from Tohoku earthquake Flexibly reassigning resources among cloud providers and network providers on a global scale Serious damage on ICT facilities in the disaster area Serious power shortage / rolling blackout in wide area of East Japan 13 Secure inter-cloud for Lifeline services Case1: Migrate lifeline services by accommodating cloud resources among cloud/network providers when disaster or massive breakdown occurs Lifeline Services (administrative, financial, medical care, etc.) Cloud Providor Disaster AP AP Other cloud providers Lifeline Services Amusement Sensor network Home network Internet Case2: Cloud providers reassign their cloud resources in line with social importance, e.g. from amusement services to lifeline services, when necessary 14

8 Secure inter-cloud needed Cloud service adoption in the field of mission critical applications and social life-line services E-government systems, Medical applications (EHR, PHR) Telecommunication and utilities management systems Requirements: Nation-wide disaster tolerant Flexible resource re-assignment in line with social importance Collaborative inter-cloud computing and networking for secure social infrastructure Provide legal and regulatory system 15 INTER-CLOUD TECHNOLOGY DEVELOPMENT AND GICTF 16

9 Highly Reliable Inter-Cloud Systems R&D* ( ) Application Server Storage Cloud System A AP AP AP Cloud System B *Funded by MIC Cloud Resource Provisioning Cloud Resource Federation and Reconfiguration Open Flow Open Flow Dynamically Reconfigurable based on Open Flow Sensor Node Physical World Sensor Node Real-time Sensor Node 17 Cloud Resource Federation and Reconfiguration Cloud B Service provision requirements Inter-cloud monitoring and negotiation control Cloud A Provisioning Resource plan Monitoring and control Finding available resources Policy negotiation Monitoring and control Dynamic reconfiguration of the server environment Resource reservation request Flexible resource allocation / reconfiguration Monitoring information Servers and storages Servers and storages Dynamic reconfiguration of the network environment configuration / optimization Intranet Intranet 18

10 GICTF Mission Promotes the global open inter-cloud technologies and standardization through collaboration among academia, government and industry Cloud system A Cloud system B Applications Standard intercloud interface Servers Storage devices Application Applications 19 GICTF Organization 86 members from industry NTT, KDDI, NEC, Hitachi, Fujitsu, Toshiba, Microsoft, IBM, Oracle, Cisco, VMware, IIJ, BIGLOBE, NICT, NII, NRI, etc., 38 members from academy General Assembly Chair: Tomonori Aoyama Vice Chair Atsuhiro Goto Board of Directors Technology Task Force 1. Share related technology information among members 2. Identify technical needs related to secure cloud interworking applicable to e-government, etc. 3. Develop a standard set of specifications and propose it to relevant standards bodies Application Task Force 1. Identify technical needs related to secure cloud interworking 2. Promote widespread use of cloud interworking technology 20

11 GICTF Deliverables Use case and functional requirements for Inter- Cloud Computing Aug 2010 proposed to ITU-T FG Cloud, other fora and orgs. Technical Requirements for Supporting the Intercloud ing Apr 2012 Inter-cloud Interface Specification Draft (Cloud Resource Data Model) May 2012 proposed to ITU-T SG13. Inter-cloud Interface Specification Draft (Intercloud Protocol) May 2012 proposed to ITU-T SG13 21 Inter-cloud related SDOs Forum Standard SNIA OGF- Europe OGF SLG Special Liaison Group member DMTF July 2012 OMG Cloud Interoperability Roadmaps Session US Government NIST CC forum De-jure Standard Open Source Community OpenStack Jan 2012 ITU-T SG13 CC Standard Study Group Cloud Business Google, Salesforce, Amazon, etc. ISO/IEC JTC SC38 22

12 INTER-CLOUD INTERFACE FOR STANDARDIZATION 23 Inter-cloud interface and control mechanisms Disaster Server control function Server allocation in heterogeneous clouds Inter-cloud control function Inter-cloud disaster recovery Resource allocation based on individual situations Cloud provider A Backbone network Cloud provider B Access network Backbone network Switching Cloud provider M Backbone network Cloud provider N Backbone netwrok control function Cloud user On-demand development of overlay networks between clouds Inter-cloud interface (ITU-T standardization promoted) 24

13 Definition of Inter-cloud Interface The interface between two cloud systems administered by different operators, focusing on: Inter-cloud protocol (Information flows and message semantics with associated parameters) Resource data models Cloud System Inter-Cloud Protocol Cloud System Inter-Cloud IF Computing Resource Data Model (Computing and Storage) Resource Data Model () Inter-Cloud Protocol Data Center Resource Resource Data Center Resource Resource Lower Layer Protocols (e.g., REST or SOAP) 25 Information flow example for resource reservation Resource reservation Cloud System A Cloud System B Resource Data Center Resource Resource Reservation Request NW Resource Reservation Request Server Resource Reservation Request Messages Resource Reservation NW Resource Reservation Response Server Resource Reservation Response Resource Reservation Response Parameters -Request ID -Cloud system A attributes System name, URL, Provider ID, System configuration -Cloud system B attributes -Information for resources to be reserved

14 Resource Data Model resource model Three-type network resources: Provider User Definition of classes and sample descriptions in XML group - group ID - ID list -redundancy ID -Number of end points -Physical bandwidth -Cost User User -Name -Address - address usage status -Measuring point -Measurement values QoS -Guarantee bandwidth -Maximum bandwidth Provider Access point -Access point ID - address Provider -Provider ID -Access point ID list Summary Inter-cloud computing and networking are essential for achieving lifeline or mission critical social services, and must be based on appropriate global standards. GICTF is contributing to the promotion and standardization of such inter-cloud interface We should encourage open discussions for social aspects, such as legal and regulatory issues around them.. 28

15 THANK YOU! 29