Inter‐cloud computing:
Use cases and requirements
for Social Infrastructures
Feb 24, 2012
Global Inter‐Cloud Technology Forum (GICTF)
Institute of Information Security (IISEC)
Atsuhiro Goto
Feb 24, 2012

GICTF & IISEC

1Secure cloud computing is needed
Consumers

Enterprise / Organizations
Small and medium‐sizedenterprises/municipalities

Individuals

Large enterprises/
governments

Social infra-structures

High

Medical, Finance
Mission-critical tasks
Utility operation systems
Quality
Reliability
SafetyHome ICT

Tele-work

e-Government
Limited Use in Enterprise /Organizations

EntertainmentBlogs, SNS

Current Cloud areas
Low
Public cloudPublic cloudPrivate cloud(for Internet use)
Feb 24, 2012

GICTF & IISEC

2Agenda• Highly Reliable Inter‐Cloud Systems R&D
project, a national project in Japan• Global Inter‐Cloud Technology Forum (GICTF)• Inter‐Cloud for secure “Lifeline Services”– Lessons learned from the East Japan Earthquake

Feb 24, 2012

GICTF & IISEC

3

Highly Reliable Inter‐Cloud Systems R&D
project funded by Japanese government <2009 ‐ 2012: total 43M$>
Application

ServerAP AP AP
Cloud System
A

Cloud System
B

Storage

Cloud Resource
Provisioning
Cloud Resource
Federation andReconfiguration

DynamicallyReconfigurable NW
based on Open Flow

NetworkOpen Flow
Open FlowSensor
NodeSensor
NodeReal-time Sensor
NodePhysicalWorldFeb 24, 2012

GICTF & IISEC

4Global Standardization of “Inter‐Cloud”
Global Inter‐Cloud Technology Forum (GICTF)
Main activities:• Identify technical needs for secure “inter‐cloud technology”• Raise awareness of users both in industry, government and communities

Membership (as of December 2011)• 80 enterprises, National laboratories, and academia• Observer: MIC, METI

Feb 24, 2012

GICTF & IISEC

5

Global Inter‐Cloud Technology Forum Major Deliverables
I.

“Use case and functional requirements for Inter‐CloudComputing” E/Aug 2010

II. “Inter‐Cloud interface specification on protocols” J/Dec
2011, E/Mar 2012
III. “Inter‐Cloud interface specification on resources data modelfor network control” J/Dec 2011, E/Mar 2012
IV. “Network and technical requirements in support of Inter‐Cloud” J/Dec 2011 E/Aprl 2012

 Promote international standardization of “inter‐cloud”
interface through cooperation with standards bodies
Feb 24, 2012

GICTF & IISEC

6

Cloud Functional ArchitectureFirst Cloud ICT architecture
End‐User
Function

User Layer

Partner Function

Endpoint
Function

AccessLayer

Administrator
Function

Cross‐Layer
FunctionsInter Cloud
Function

OperationalManagementFunction

SaaS / CaaS

Services
Layer

PaaS

Service Orchestration

IaaS
NaaS

Cloud
PerformanceFu
nctionSecurity &Privacy Function

Resource Orchestration

Resources &Network
Layer

Pooling &Virtualization
PhysicalResources

Feb 24, 2012

VN

Intra Cloud
NetworkVS

VM

Storage

Software & Platform
AssetsComputing

GICTF & IISEC

Virtual Path
Virtual Circuit
Core Transport
Network

Inter Cloud
Network7

Inter‐cloud Computing

E‐Gov
FinanceOn‐demand reassignment of cloud resources
across “autonomous” clouds
E‐Gov

MedicalCDN

Finance Medical
CDN

Applicationinterworking

Cloud AFeb 24, 2012

SLA assurance

Storage

SLA assurance

ServerNetworkGICTF & IISEC

Cloud B

8Lessons learned :The East Japan Earthquake
Flexibly reassigning resources among cloud providers
and network providers on a global scale Serious damage
on ICT facilities inthe disaster area

 Serious power shortage /rolling blackout in wide
area of East JapanFeb 24, 2012

GICTF & IISEC

9

Secure Inter‐Cloud for “Lifeline Services”
Case1: Migrate lifeline services
by accommodating cloud
resources among cloud/network
providers when disaster or
massive breakdown occurs

Lifeline Services(administrative,financial,medical care, etc.)

Other cloudproviders

Cloud Providor
DisasterAPAP

Lifeline Services
Amusement

Case2: Cloud providers re‐assign their cloud resourcesin line with social importance,
e.g. from amusement
services to lifeline services,
when necessary

InternetSensor network

Home network
Feb 24, 2012

GICTF & IISEC

10

Wrap‐ups• The future social infrastructures based on cloudcomputing and networking systems must be basedon appropriate global standards.
• GICTF has been and will be contributing to inter‐cloud technologies development and standardization.
• Now, technology evaluation efforts are very
important– By global collaboration projects with EU and otherregions– By encouraging users to join the evaluation via
GICTF Application TF and JCC.
Feb 24, 2012

GICTF & IISEC

11

BACKUPS

Feb 24, 2012

GICTF & IISEC

12

Inter‐cloud test bed planned in 2012
Cloud B• Inter‐cloud technology evaluation will
start in 2012 on the national‐scale
test bed where three cloud data
centers in Tokyo , Tohoku, and Kyushu
will be connected with each other via
JGN‐X.

Base(2)
TohokuExclusive Line100M

JGN‐X
Tohoku‐1

Base(1)
Tokyo

JGN‐X
Kyushu‐1

JGN‐X
Tokyo‐1

Base(3)KyushuCloud AJGN‐X
Kyushu‐4
Feb 24, 2012

Cloud CGICTF & IISEC

13Cloud Standardization Status
Taxonomy, Use cases, SLA, Requirements
NIST

ISO/IEC JTC1ETSI

KCSA

CCF

GICTF

ITU-T

Open Cloud Manifesto

SIENA

OGC

CBA

Implementation OASIS

OCC

ITU-T

NIST

Cloud
Users/
Operators

Architecture

SaaS API

Cloud MngAPI

PaaS APIBSS/
OSS

Security
CSA

GICTF

ENISA

DMTF

OGF
DMTF

Feb 24, 2012

IEEE

ITU-T
TM forumSDO coordination
Global

ITU-T

DMTF

SNIA

ATIS CSF

USA

Inter-CloudNIST

IaaS APIOpenStack

Other Cloud

OMG

EU

GICTF & IISEC

ISO/IECJTC1OCCIEEEAsia

Japan

14

GICTF Organization
General Assembly

Chair: Tomonori Aoyama
V.Chair: Atsuhiro Goto

Board of Directors

Technology Task ForceApplication Task Force

1. Exchange and share information
with relevant standards bodies,academia and communities
2. Identify technical needs related tosecure inter-cloud technology
applicable to e-Government, etc.
3. Develop a standard set ofspecifications applicable to eGovernment, etc. and propose it torelevant standards bodies
Feb 24, 2012

1. Identify technical needs
related to secure inter-cloudtechnology
2. Promote widespread use ofinter-cloud computing
technology

GICTF & IISEC

15

Four white papers produced by GICTF
1. Use cases and functional requirements for inter‐cloud computing, Aug 2010.
•Six use cases and requirements

2. Network and technical requirements in support ofinter‐cloud, Apr. 2012.
•

Detailed study on required network functionalities in three
timeframes

3. Inter‐cloud interface specification on protocols, Mar.
2012.
•Information flows between two cloud operators

4. Inter‐cloud interface specification on resources data
model for network control, Mar. 2012.
•Data semantics between two cloud operators

Feb 24, 2012GICTF & IISEC

16

Framework of Inter‐cloud Interface
Specification• The interface between two cloud systems administered bydifferent operators• Three layer modeling– Lower layer protocols assumed as some XML message exchange,e.g., REST or SOAP
– Inter‐cloud protocol: Information flows, message semantics withassociated parameters specified– Data models for network resources specified– Data models for computing and storage referenced to other SDO’s
specifications

Cloud System

Data Center
Resource

Network
Resource

Feb 24, 2012

Cloud System

Data Center
Resource

Network
Resource

Inter-Cloud IF

Inter‐Cloud Protocol

GICTF & IISECData Center Resource
Data Model(Computing and Storage)

Network Resource
Data Model(Network)

Inter‐Cloud Protocol
Lower Layer Protocols (e.g., REST or SOAP)

17

Examples of information flow and datamodel• Resource data model• Information flows– Definition of three resource states. i.e., unused, reserved, andused– Information flows between cloud providers•••

Notification of system activation and being ready
Resource discovery, reservation, usage monitoring, activation,and release
Data synchronization between cloud providers and delegationof the control– Messages to be exchanged with their parameters

Resource reservationCloudSystem ACloudSystem BNetwork
Resource

Data Center
Resource

Resource Reservation Request
NW Resource Reservation Request
Server Resource Reservation Request
Messages

NetworkNetwork group‐Network group ID‐Network ID list
‐redundancy‐‐‐‐‐‐‐‐‐‐‐

Network usage status‐Measuring point‐Measurement values‐‐‐‐‐‐‐‐‐‐

Network‐Network ID‐Number of end points‐Physical bandwidth‐Cost‐‐‐‐‐‐‐‐‐‐‐

QoS‐Guarantee bandwidth‐Maximum bandwidth‐‐‐‐‐‐‐‐‐‐‐

User

Network Provider

Resource Reservation

NW Resource Reservation Response
Server Resource Reservation Response
Resource Reservation Response

User‐Name‐Address‐Network address‐‐‐‐‐‐‐‐‐‐‐Parameters‐Request ID‐Cloud system A attributes
System name, URL, Provider ID, System configuration‐Cloud system B attributes‐Information for resources to be reserved‐...

Feb 24, 2012

– Three‐type network resources: network,
provider, and user
– Definition of classes and example descriptions
in XMLGICTF & IISEC

Access point‐Access point ID‐Network address‐‐‐‐‐‐‐‐‐‐‐‐
Provider‐Provider ID‐Access point ID list‐‐‐‐‐‐‐‐‐‐‐

18

Results of ITU‐T FG cloud computing•••••

Seven deliverables produced by two‐year activities and eight meetings
Potential drafts for Recommendations provided: Ecosystems, Reference
Architecture, Infrastructure, and Security
Identification of study items in the final FG‐Cloud report including Inter‐
Cloud stating that “Procedures and interfaces are required for…”
Nomination of SG13 as the lead Study Group in ITU‐T cloud computing
Joint Coordination Activity (JCA) to be established, which should coordinate
cloud computing studies with SDOs beyond ITU‐TTarget SGContentsaIntroduction to the cloud ecosystem:
definitions, taxonomies, use cases,and high level requirements

SG13Definitions, actors and roles、use cases, and-highlevel requirements
NOTE: Intercloud aspect has been incorporated in use
cases, high-level requirements, and scenariosb

Functional Requirements andReference Architecture

SG13Layers and their functions.
NOTE: Access layer contains Inter-Cloud function.

cRequirements and frameworkarchitecture of cloud infrastructure

SG13Lower network parts
NOTE: Functional requirements includes functional
requirements for the inter-cloud network

dCloud Resource Management GapAnalysis

SG13

Gap analysis on resource managementeCloud Security

SG17

Security considerations and current practices

Deliverable

Feb 24, 2012

GICTF & IISEC

19

Comparison between four GICTF whitepapers and four FG Cloud deliverables
GICTF 4 White Papers
Use cases
Definition
Concept overview

12

Use Cases andFunctional
Requirements

Network andTechnicalRequirements

Requirements
Functions

1Architecture and IF
Signaling

FG Cloud Main 4 Deliverables
aEcosystembc

Reference
Architecture

Infra‐structuredResource
management

3
Inter‐Cloud
ProtocolProtocolInformation data elements

4Resource Data
Model

Profiling
Interoperability
Feb 24, 2012

GICTF & IISEC

20

Ｊapan Cloud Consortium
The private organization of a “Japan Cloud Consortium” is established to promote thedissemination/development of cloud services in Japan in an industry‐academia‐government
collaboration of various industries, organizations, and businesses.

Ｊapan Cloud Consortium●Members
Total 378

General meeting (About twice a year)（includingEnterprises 307,Organizations,59,Experts １２）（Dec, 2011）

Secretarial Board(a secretariat consisting of Nippon Keidanren andseveral other enterprises/organizations)

WG

NICT

IPA
Feb 24, 2012

ASPIC

WG

JDCC

WG

GICTF
GICTF & IISEC

WG

GIPC

ＯＳＳ－Ｃ

Relatedorganizations

21Communication facilities were the worst
affected• Transmission lines: 90
routes were cut off• 18 buildings were fully
destroyed, and 23
buildings were flooded• 65000 telephone poles
were destroyed by theflood

Feb 24, 2012

GICTF & IISEC22