Securing Cloud - The Quantum Way

Marmik Pandya
DOI: https://doi.org/10.48550/arXiv.1512.02196
2015-12-08
Abstract:Confidentiality, Integrity, and Availability are basic goals of security architecture. To ensure CIA, many authentication scheme has been introduced in several years. Currently deployment of Public Key Infrastructure (PKI) is a most significant solution. PKI involving exchange key using certificates via a public channel to a authenticate users in the cloud infrastructure. It is exposed to widespread security threats such as eavesdropping, the man in the middle attack, masquerade et al. Quantum cryptography is of the most prominent fields in the modern world of information security. Quantum cryptography is considered to be a future replica of classical cryptography along with a vital stance to break existing classical cryptography. This paper aims to look into basic security architecture in place currently and further it tries to introduce a new proposed security architecture for cloud computing environment, which makes use of the knowledge of Quantum Mechanics and current advances in research in Quantum Computing, to provide a more secure architecture.
Cryptography and Security
What problem does this paper attempt to address?
The main problem that this paper attempts to solve is the security issues in the current cloud computing environment, especially the security threats faced by the existing Public Key Infrastructure (PKI) and other traditional encryption methods in the face of quantum computers. With the development of quantum computers, traditional encryption algorithms such as RSA and AES may be quickly cracked by quantum algorithms (such as Shor algorithm), thus making the encryption systems based on these algorithms no longer secure. To meet this challenge, the paper proposes a new hybrid security architecture, aiming to combine the advantages of classical encryption techniques (such as the Kerberos authentication model) with those of quantum cryptography, especially by using the Quantum Key Distribution (QKD) technology in the key distribution and transmission processes. This new architecture not only provides higher security than existing cloud security solutions but also maintains the easy - to - deploy feature of the Kerberos model and supports Single Sign - On (SSO), improving the user experience and the flexibility of the system. Specifically, the paper solves the above problems through the following points: 1. **Introducing QKD**: Using the principles of quantum mechanics, especially quantum entanglement and the uncertainty principle, to realize a more secure key distribution mechanism and prevent the key from being intercepted or tampered with during transmission. 2. **Improved Kerberos model**: Adding QKD in the Kerberos authentication process and using the quantum channel for key generation and distribution to improve the security of the entire authentication process. 3. **Data transmission in the quantum channel**: Establishing a quantum channel between the client and the service provider for the transmission of encrypted data, further enhancing data security. 4. **Reducing the computational burden**: Compared with traditional PKI or AES encryption algorithms, QKD requires less computation in the key generation process, so it can provide a faster service response speed. In summary, this paper aims to propose a new cloud computing security architecture suitable for the future quantum computing era by combining quantum cryptography and classical encryption techniques to deal with current and future security threats.