Browse > Article
http://dx.doi.org/10.13089/JKIISC.2015.25.5.1245

Protection of Personal Information on Cloud Service Models  

Lee, Bosung (Barun ICT Research Center, Yonsei University)
Kim, Beomsoo (Barun ICT Research Center, Yonsei University)
Publication Information
Journal of the Korea Institute of Information Security & Cryptology / v.25, no.5, 2015 , pp. 1245-1255 More about this Journal
Abstract
As cloud computing services become popular, the concern on the data security of cloud services increases and the efforts for the data security become essential. In this paper, we describe the pros and cons of cloud computing including the definition of cloud. Then, we discuss the regulations about the protection of user data defined in cloud promotion act. Previous studies related to the privacy protection and the entrustment of personal information in cloud computing are reviewed. We examine how to store the personal information depending on the cloud service model. As a result, we argue that the entrustment of personal information should vary according to the cloud service model and we propose how to protect the personal information on IaaS and SaaS cloud service models.
Keywords
Cloud Service Model; Cloud Promotion Act; Protection of Personal Information;
Citations & Related Records
Times Cited By KSCI : 2  (Citation Analysis)
연도 인용수 순위
1 Ministry of Science, ICT and Future Planning, "The National Assembly passed the Cloud Computing Industry Promotion Act", Press Release, Mar. 2015
2 Gartner, "Cloud Computing", http://blogs.gartner.com/it-glossary/cloud-computing/
3 James Staten, Simon Tates, and Ben Echols, "$TechRadar^{TM}$ For Infrastructure & Operations Professionals: Cloud Computing, Q3 2009," Forrester, 2009
4 Peter Mell, and Timothy Grance, "The NIST Definition of Cloud Computing", NIST SP800-144, Sep. 2011
5 Seungwoo Son, "Legal Issues on Cloud Computing Service & SaaS," Korea Association For Informedia Law, Informedia Law, vol. 14, no. 1, Jun. 2011
6 Yeun-Dek Chung, "The Legal Study of Protection of Personal Information in Cloud Computing Service," Korea Association For Informedia Law, Informedia Law, vol. 15, no. 3, Feb. 2012
7 Won-joon Jeong, "Legal Issues for Promotion of Cloud Computing (I) -Issues on the Protection of Personal Information-," ICT & Media Policy, vol. 26, no. 20, Nov. 2014
8 W. Yu, and J. Lim, "A Study on the Privacy Security Management under the Cloud Computing Service Provider," Journal of The Korea Institute of Information Security and Cryptology, vol. 22, no. 2, pp. 337-346, Apr. 2012
9 D. Park, and K. Han, "A Study on PIMS Controls for PII Outsourcing Management under the Cloud Service Environment," Journal of The Korea Institute of Information Security and Cryptology, vol. 23, no 6., pp. 1267-1275, Dec. 2013   DOI
10 Ministry of Science, ICT and Future Planning, "Korea Cloud Initiative," Jan. 2014
11 Ministry of Science, ICT and Future Planning, "Enactments of decree of the Act on the Development of Cloud Computing and Protection of Users," May. 2015