• 제목/요약/키워드: Secure Outsourcing

검색결과 38건 처리시간 0.019초

Fully Verifiable Algorithm for Secure Outsourcing of Bilinear Pairing in Cloud Computing

  • Dong, Min;Ren, Yanli;Zhang, Xinpeng
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제11권7호
    • /
    • pp.3648-3663
    • /
    • 2017
  • With the development of cloud computing and widespread availability of mobile devices, outsourcing computation has gotten more and more attention in cloud computing services. The computation of bilinear pairing is the most expensive operation in pair-based cryptographic schemes. Currently, most of the algorithms for outsourcing bilinear pairing have small checkability or the outsourcers need to operate expensive computations. In this paper, we propose an efficient algorithm for outsourcing bilinear pairing with two servers, where the outsourcers can detect the errors with a probability of 1 if the cloud servers are dishonest, and the outsourcers are not involved in any complex computations. Finally, the performance evaluation demonstrates that the proposed algorithm is most efficient in all of fully verifiable outsourcing algorithms for bilinear pairing.

A Fast and Secure Scheme for Data Outsourcing in the Cloud

  • Liu, Yanjun;Wu, Hsiao-Ling;Chang, Chin-Chen
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제8권8호
    • /
    • pp.2708-2721
    • /
    • 2014
  • Data outsourcing in the cloud (DOC) is a promising solution for data management at the present time, but it could result in the disclosure of outsourced data to unauthorized users. Therefore, protecting the confidentiality of such data has become a very challenging issue. The conventional way to achieve data confidentiality is to encrypt the data via asymmetric or symmetric encryptions before outsourcing. However, this is computationally inefficient because encryption/decryption operations are time-consuming. In recent years, a few DOC schemes based on secret sharing have emerged due to their low computational complexity. However, Dautrich and Ravishankar pointed out that most of them are insecure against certain kinds of collusion attacks. In this paper, we proposed a novel DOC scheme based on Shamir's secret sharing to overcome the security issues of these schemes. Our scheme can allow an authorized data user to recover all data files in a specified subset at once rather than one file at a time as required by other schemes that are based on secret sharing. Our thorough analyses showed that our proposed scheme is secure and that its performance is satisfactory.

Privacy-preserving Outsourcing Schemes of Modular Exponentiations Using Single Untrusted Cloud Server

  • Zhao, Ling;Zhang, Mingwu;Shen, Hua;Zhang, Yudi;Shen, Jian
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제11권2호
    • /
    • pp.826-845
    • /
    • 2017
  • Outsourcing computation is one of the most important applications in cloud computing, and it has a huge ability to satisfy the demand of data centers. Modular exponentiation computation, broadly used in the cryptographic protocols, has been recognized as one of the most time-consuming calculation operations in cryptosystems. Previously, modular exponentiations can be securely outsourced by using two untrusted cloud servers. In this paper, we present two practical and secure outsourcing modular exponentiations schemes that support only one untrusted cloud server. Explicitly, we make the base and the index blind by putting them into a matrix before send to the cloud server. Our schemes provide better performance in higher efficiency and flexible checkability which support single cloud server. Additionally, there exists another advantage of our schemes that the schemes are proved to be secure and effective without any cryptographic assumptions.

Functional Privacy-preserving Outsourcing Scheme with Computation Verifiability in Fog Computing

  • Tang, Wenyi;Qin, Bo;Li, Yanan;Wu, Qianhong
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제14권1호
    • /
    • pp.281-298
    • /
    • 2020
  • Fog computing has become a popular concept in the application of internet of things (IoT). With the superiority in better service providing, the edge cloud has become an attractive solution to IoT networks. The data outsourcing scheme of IoT devices demands privacy protection as well as computation verification since the lightweight devices not only outsource their data but also their computation. Existing solutions mainly deal with the operations over encrypted data, but cannot support the computation verification in the same time. In this paper, we propose a data outsourcing scheme based on an encrypted database system with linear computation as well as efficient query ability, and enhance the interlayer program in the original system with homomorphic message authenticators so that the system could perform computational verifying. The tools we use to construct our scheme have been proven secure and valid. With our scheme, the system could check if the cloud provides the correct service as the system asks. The experiment also shows that our scheme could be as effective as the original version, and the extra load in time is neglectable.

산업은행: 금융 IT 아웃소싱 - 공동협력으로 안전한 문을 연다 (A Case Study - IT Outsourcing of the Korea Development Bank)

  • 강주영;이재규
    • 경영정보학연구
    • /
    • 제7권2호
    • /
    • pp.229-255
    • /
    • 2005
  • 산업은행은 1999년 제1금융권으로는 최초로 IT 운영에 대한 전체 아웃소싱을 추진하였다. 대부분의 은행들이 금융사고와 보안, 그리고 파업에 대한 위험 등을 이유로 타회사 방식 아웃소싱을 꺼리는 상황에서 산업은행의 이러한 시도는 많은 주목을 받았다. 이후 산업은행은 끊임없이 아웃소싱의 문제점들을 진단하고 이를 개선하기 위하여 다양한 보완책을 강구하였다. 이러한 개선의 결과로, 산업은행의 IT 아웃소싱은 외주 운영기와 공동 운영기를 지나 금융권 IT 아웃소싱 최초로 타 은행에 비해 선구적인 아웃소싱 방식인 책임운영 체제를 갖추게 되었다. 책임운영을 통해 산업은행은 최신의 향상된 IT 수준을 얻고 내부 인력을 핵심역량에 집중시키며 부족 인력의 즉시 수급이 가능하게 되어 유연성을 확보할 수 있었다. 또한, 외주업체와의 관계를 공급자와 수요자의 일방적 관계로 설정하지 않고 함께 책임지는 책임 운영 방식 체제로 전환함으로써 자체 보유역량과 IT 전문업체의 노하우를 통합할 수 있게 되어 IT 아웃소싱의 순기능을 활용할 수 있게 되었다. 이와 같은 산업은행의 IT 아웃소싱 사례를 살펴봄으로써 일반적으로 타 회사 방식 아웃소싱에 대해 갖고 있는 우려가 현실적인 것인지, 혹은 극복될 수 있는 것인지를 확인하고, 자회사 방식의 아웃소싱에 비해 어떤 장점들을 갖고 있으며 어떤 성과를 보이고 있는지 정리하였다. 뿐만 아니라, 타 회사방식 아웃소싱에 대한 잘못된 견해들을 바로잡음으로써 폐쇄된 금융 IT 아웃소싱 시장의 구조를 개선하고 국내 IT 아웃소싱 업체의 국제 경쟁력을 제고할 수 있을 것으로 기대한다.

지방자치단체의 IT 유지보수관리의 아웃소싱 서비스 요인에 관한 연구: AHP 분석을 기반으로 (A Study of IT Maintenance Outsourcing Service Factors of Local Governments: Based on AHP Analysis Method)

  • 전대호;장상현;이정재;최정일
    • 한국IT서비스학회지
    • /
    • 제21권3호
    • /
    • pp.43-61
    • /
    • 2022
  • With the development of information technology, IT-based services in public administration has become more indispensable. As a result, the importance of IT maintenance projects to improve the efficiency of IT services and secure service levels is growing. Due to the nature of IT maintenance projects on local government, which mainly involve small and medium-sized IT companies in the region, business participating companies often do not have an appropriate methodology for service quality management. To solve this situation, the government has prepared a service level agreements (SLAs) that can be applied to IT maintenance projects. However, most local governments do not use SLAs for IT maintenance projects. As a result, various problems such as failure of the IT maintenance project or deterioration of quality are occurring Thus, this paper suggested major indexes to evaluate which service factors affect the efficient operation of information systems and the improvement of service quality in IT maintenance projects of local governments and analyzed the importance of indexes based on AHP method. Using this research method, this study found the theoretical implications on the outsourcing service of IT maintenance.

아웃소싱이 기업성과에 미치는 영향 (A Study on the Effect of Outsourced to Management Performance)

  • 배하진;곽순진;김광수
    • 벤처창업연구
    • /
    • 제9권5호
    • /
    • pp.83-94
    • /
    • 2014
  • 본 연구는 최근 들어 가속화되고 있는 글로벌화와 인소싱(Insourcing)에 주력 기업들이 조직의 핵심역량강화를 목표로 도입하고 있는 아웃소싱(Outsourcing)을 분석하는데 목적이 있다. 특히 국내기업의 경우 자원의 해외조달, 높은 인건비의 상승, 부동산 가격의 급증 등 경영환경 변화에 대한 능동적 대처와 유력한 분야나 핵심역량에 자원을 집중시키기 위하여 아웃소싱을 실시하고 있다. 아웃소싱은 기업이 당면한 문제를 효율적으로 처리할 수 있고 핵심역량 이 외의 분야를 위탁 처리할 수 있어 기업의 경쟁력 확대가 가능하다. 이러한 변화 속에서 아웃소싱은 전문성을 확보할 수 있으며 고객의 니즈(Needs)를 충족할 수 있는 방법의 하나로 효율성과 경쟁력 확보 수단으로 활용되고 있다. 최근에는 대기업뿐 만아니라 중소기업 및 정부에서도 시장의 경쟁력 확보 수단으로 활용범위가 넓어지고 있다. 이와 같은 아웃소싱 시장의 흐름은 선진국에서부터 시작되었으나, 우리나라와 경영환경이 비슷한 일본의 경우 글로벌 아웃소싱의 시장규모가 급속하게 성장하고 있는 추세에 있다. 이에 본 연구는 기업의 경쟁력 강화를 위하여 추구하고 있는 경영형태인 아웃소싱에 대하여 아웃소싱을 운영하고 있는 업체를 주 대상으로 아웃소싱이 기업성과에 미치는 영향에 대하여 실증 분석함으로써 시사점을 제시하고자 한다.

  • PDF

디자인서비스의 대가기준 사례조사 연구 (A case research for standard of cost in design service)

  • 안진호;이정선;김인준
    • 서비스연구
    • /
    • 제9권3호
    • /
    • pp.61-72
    • /
    • 2019
  • 디자인은 국가산업정책과 4차 산업혁명 등 최첨단 산업의 발전에 미치는 영향이 지대함에도 불구하고, 우리나라에서 저평가되고 있는 지식서비스 산업 중 하나로 전략적 아웃소싱 체계가 무너지고 있으며, 이러한 현상은 국내에만 국한되지 않고 유럽과 미국 등 디자인 선진국의 디자인서비스 기업들도 고전을 면치 못하고 있는 상황이다. 이에, 해외를 포함한 국내 디자인 프로젝트의 사례조사를 통해 몇 가지 시사점을 발견하게 된 것은, 민간기업은 디자인아웃소싱을 통해 디자인품질수준 개선과 혁신추구보다, 디자인관련 비용절감과 비용구조이 유동성 확보를 위하는 점이 크다는 것이다. 디자인이 기업의 핵심역량이기에 핵심 디자인업무를 내재화하고, 제품이나 서비스가 플랫폼화 되면서 지역별 디자인 대응업무가 줄어들게 됨으로써 대기업의 디자인서비스 아웃소싱 대가기준의 하락원인이 된 것이다. 2000년대 초반 디자인경영의 중요성으로 글로벌 컨설팅 기업들이 디자인서비스 기업과의 협력체계가 아닌 M&A를 추구하였고, 삼성전자를 비롯한 대기업들이 우수 디자인 인력을 대거 영입하면서 자체 디자인경영연구소를 키웠다. 본 연구는 디자인서비스 대가기준에 대하여 광범위하게 공공과 민간기업(대기업, 중견기업)의 디자인서비스 아웃소싱 사례에 대하여 연구를 수행하여 디자인산업의 실질적 규모와 수준에 대한 지표를 파악하였다. 이러한 대가기준의 변화와 영향 등에 대하여 전문가 인터뷰와 문헌연구를 통해 궁극적으로 글로벌 디자인산업의 가치와 방향성에 대한 제언을 하고자 한다.

외식사업발전을 위한 조리분야 아웃소싱 전략에 관한 연구 (평가측정치 개발절차를 중심으로) (A Comparative Study of Outsourcing Culinary Part of Foodservice Industry Development.)

  • 김기영
    • 한국조리학회지
    • /
    • 제7권3호
    • /
    • pp.13-34
    • /
    • 2001
  • The case which it contracts with the dynamic result measurement system when actual outsourcing evaluation measurement is composed and then one result standard between the service supplier and the user is set, which owns jointly the expense which is reduced from that or the benefit which is created from that is increasing In the conclusion, for outsourcing management strategy of domestic foodservice industry in order to succeed, first it is accurate and examined that for what and how outsourcing should be introduced and as a result, what kind of result can be raised from that result\ulcorner Food service industry should be outsourced if you want to make more many investment in better humane resources, food & beverage-goods-security and education to provide eating-out service out of various business in food industry. When considering the actuality of the domestic foodservice industry that time it is appropriate, it sees. The foreign-brand goods which is introduced in the country are being executing in the 1ink of part management strategy. One of the most influential factor of domestic foodservice industry's management pressure is overspent management expenses, Does the namely expenses preparation effect reach which degree\ulcorner what kind of method can most decrease these expenses\ulcorner Doing grows the success and failure of the Korean foodservice industry controls result with the fact that it will operate with a big variable sees. The background which the domestic foodservice industry should introduce inevitably the outsiurcing system is to develop continuously nation foodservice industry in the way of cost curtailment of food-material, a labor cost curtailment with efficient application and synergic effect like specialty manpower utilization. The kindred competitive enterprises gradually concentrate management resource to the point ability from the present point of view which is increasing and a strategy position they secure, to prepare a competitive power, what sees it is important national industry must prepare a new paradigm. It is important to measure the result based on sales accomplishment in operation system dimension, and it is more important to appropriately apply regard of the evaluation measurement

  • PDF

Towards efficient sharing of encrypted data in cloud-based mobile social network

  • Sun, Xin;Yao, Yiyang;Xia, Yingjie;Liu, Xuejiao;Chen, Jian;Wang, Zhiqiang
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • 제10권4호
    • /
    • pp.1892-1903
    • /
    • 2016
  • Mobile social network is becoming more and more popular with respect to the development and popularity of mobile devices and interpersonal sociality. As the amount of social data increases in a great deal and cloud computing techniques become developed, the architecture of mobile social network is evolved into cloud-based that mobile clients send data to the cloud and make data accessible from clients. The data in the cloud should be stored in a secure fashion to protect user privacy and restrict data sharing defined by users. Ciphertext-policy attribute-based encryption (CP-ABE) is currently considered to be a promising security solution for cloud-based mobile social network to encrypt the sensitive data. However, its ciphertext size and decryption time grow linearly with the attribute numbers in the access structure. In order to reduce the computing overhead held by the mobile devices, in this paper we propose a new Outsourcing decryption and Match-then-decrypt CP-ABE algorithm (OM-CP-ABE) which firstly outsources the computation-intensive bilinear pairing operations to a proxy, and secondly performs the decryption test on the attributes set matching access policy in ciphertexts. The experimental performance assessments show the security strength and efficiency of the proposed solution in terms of computation, communication, and storage. Also, our construction is proven to be replayable choosen-ciphertext attacks (RCCA) secure based on the decisional bilinear Diffie-Hellman (DBDH) assumption in the standard model.