About

TERENA Trusted Cloud Drive is a pilot data storage service that uses a flexible cloud broker platform. The unique selling points of the platform are:

Federated access to the service
Metadata and storage data are kept separate
Storage data is encrypted and stored in the cloud
Metadata stored in a trusted place.
Various cloud storage back-ends can be brokered
Flexible WebDAV front-end
Different platforms (Windows, MacOS, iOS, Android) are supported
Code and documentation is fully open-source

Vocabulary

Pilot	A pilot experiment, also called a pilot study, is a small scale preliminary study conducted in order to evaluate feasibility, time, cost, adverse events, and effect size (statistical variability) in an attempt to predict an appropriate sample size and improve upon the study design prior to performance of a full-scale research project. Pilot studies, therefore, may not be appropriate for case studies.
Prototype	A prototype is an early sample or model built to test a concept or process or to act as a thing to be replicated or learned from. A prototype is designed to test and trial a new design to enhance precision by system analysts and users. Prototyping serves to provide specifications for a real, working system rather than a theoretical one. Prototype software is often referred to as alpha grade, meaning it is the first version to run. Often only a few functions are implemented, the primary focus of the alpha is to have a functional base code on to which features may be added. Once alpha grade software has most of the required features integrated into it, it becomes beta software for testing of the entire software and to adjust the program to respond correctly during situations unforeseen during development.
Evolutionary Prototyping	Evolutionary Prototyping (also known as breadboard prototyping) is quite different from Throwaway Prototyping. The main goal when using Evolutionary Prototyping is to build a very robust prototype in a structured manner and constantly refine it. "The reason for this is that the Evolutionary prototype, when built, forms the heart of the new system, and the improvements and further requirements will be built. When developing a system using Evolutionary Prototyping, the system is continually refined and rebuilt. "…evolutionary prototyping acknowledges that we do not understand all the requirements and builds only those that are well understood."
Grey-box Testing	Grey-box testing involves having knowledge of internal data structures and algorithms for purposes of designing tests, while executing those tests at the user, or black-box level.The testing procedure will include: Security testing (System intrusion, Hacking, Data privacy) Compatibility testing (Operating system, Web browser, API) Performance testing (Load, Volume, Stress) Acceptance testing (Alpha, Beta)
Service Delivery Framework	A service delivery framework is a set of principles, standards, policies and constraints used to guide the design, development, deployment, operation and retirement of services delivered by a service provider with a view to offering a consistent service experience to a specific user community in a specific business context. An SDF is the context in which a service provider's capabilities are arranged into services.
Cloud Broker Platform	The Cloud Broker Platform is a flexible open-source software tool developed by UNINETT Sigma in 2010 as part of the NEON project.The platform is the basis of the TERENA Trusted Cloud Drive pilot service.
Trusted Cloud Drive	Trusted Cloud Drive is a pilot service made available by TERENA for evolutionary prototyping, testing and service development purposes.

The aim of the pilot

The aim of this pilot is to explore possible deployment scenarios for a trusted storage service for NRENs. The pilot will be built upon a federated software platform (“the cloud broker facility”) that offers the ability to easily connect different storage back-end (both private and public cloud storage back-end are supported) and store users data in a secure and privacy preserving way (thanks to the separation of storage data and metadata as well as the built-in encryption functionality) in the cloud.

The following aspects will also be explored as part of the pilot:

(i) Longer term sustainability for a potential service;

(ii) Legal aspects and perceived trust issues related to the storage and management of the encryption keys and metadata;

(iii) Software scalability and performance;

Although the software already offers capabilities to test different front-end applications too, this aspect will not be fully explored during the pilot. However, requirements will be collected during the pilot lifetime and recommendations on how to further improve the front-end (end-users) functionalities will be provided.

Main technical characteristics of the pilot

The pilot will installing and operating the “cloud broker” which will be based on the open software developed by UNINETT Sigma in 2010 as part of the NEON project.

This proposed software has been built with the basic idea of separating the storage data (i.e. encrypted content) from the metadata (i.e. encryption keys, filenames, size, date, etc).

By keeping the metadata store “on premises” data confidentiality is guaranteed under the assumption that the premises are inside a “trusted domain” – e.g. TERENA.

Delivering the pilot

The technical part of the pilot will consist of installing all the components depicted in the picture above: namely a centralised cloud broker for the TERENA’s community (the green box depicted in the picture above), the web portal to access the system (front-end) and the storage back-end. The pilot will be carried out in two phases:

Phase i - Local installation of the platform at the TERENA office. During this phase the cloud broker (the elements in the green box above) will be installed and connected to a limited storage backend offered by TERENA. A simple web portal and the necessary support for the federated access will also be developed. For this phase TERENA will sub-contract the software developer, Maarten Koopmans who will provide the necessary support for the installation. The platform will be evaluated and tested by a limited number of NRENs’ experts coordinated by TERENA.
Phase ii - Upon successful test of Phase i, NRENs will be invited to participate in the pilot (NRENs that have already expressed their interest in participating are HEAnet, NIIF, BELNET, PSNC, and CARNet/Srce) either adding their own cloud storage back-end and/or developing new front-end applications to the cloud broker. An additional public storage back-end will also be added. During this phase it is envisage that NRENs will offer a limited number of end-users to provide feedback on the usability of the system. Although most of the user requirements will not implemented during the pilot phase, they will help shape and understand the type of service users would be looking for.

The pilot Phase ii will be operated for a 9-month period after which an evaluation will follow to assess the success of the pilot and to agree on the following steps.

There will be three deliverables produced as part of the pilot:

May 2012 – Pre-installation: System installation and technical documentation concerning the installation process (phase i).
Jan 2013 – Describe possible service models: This document will describe what service(s) can be deployed and how and will detail the service scenario recommended to phase ii and the related metrics to asses the pilot. The scenario of TERENA offering this as a (sharing) service will be considered.
March 2013 – Final report: Provide an evaluation of the pilot and recommendations for the next steps, based on the success of the pilot. Technical recommendations for NRENs that wish to run a local instance of the software will also be provided.

Full project description

Latest version of the full project description.

Go and visit Phase i and Phase ii

Child pages

TERENA Trusted Cloud Drive