Systems and apparatuses for a secure mobile cloud framework for mobile computing and communication

摘要

Systems and apparatuses for a secure mobile cloud framework (referred to as MobiCloud) for mobile computing and communication are disclosed. Embodiments of MobiCloud transfer each mobile node from a traditional strictly layer-structured communication node into a service node (SN). Each SN may be used as a service provider or a service broker according its capability. Each SN may be incorporated as a virtualized component of the MobiCloud. In some embodiments, MobiCloud mirrors an SN to one or multiple virtual images in the Cloud for addressing communication and computation deficiencies of mobile devices. Virtual images can create a visualized MANET routing and communication layer that can maximally assist the mobile nodes to enable pervasive computing services for each mobile device owner. A secure data processing framework is disclosed for the MobiCloud.

主权项

1. A mobile device configured to be a member of a mobile and ad hoc network comprising:
a wireless communication interface; a data storage device configured to store:
one or more software components;one or more duplicated software components; andone or more extended semi-shadow images, wherein the one or more extended shadow images may be configured to link one or more common software components through a virtual trust and provisioning domain, wherein the one or more extended semi-shadow images each comprise a virtual machine that mirrors a different mobile processing device, and wherein the one or more extended semi-shadow images each comprise a secure storage (SS), and wherein the data storage device is configured to process data arriving at the one or more extended semi-shadow images by:
classifying data as critical data or normal data;sending the normal data to public cloud storage through a masking procedure; andencrypting the critical data for storage in the secure storage of the one or more extended semi-shadow images; and a mobile processing device configured to:
execute the one or more software components locally;migrate execution of the one or more software components on a cloud-based computing server;execute the one or more duplicated software components on a cloud-based computing server; andprovide sensing data.