cloud computing and privacy 1 st october 2008

Cloud Computing and PrivacyCloud Computing and Privacy11stst October 2008 October 2008

Todays presentationTodays presentation

What is Cloud Computing?

Where/who do we get cloud computing from?

What are the implications for New Zealand?

What are the trends for the future?

Where does our data go? Should we care?

Discussion

What is Cloud ComputingWhat is Cloud Computing

Definition Definition

““Cloud computing describes the use of software, Cloud computing describes the use of software, storage or processing services delivered over storage or processing services delivered over the web from massive datacentresthe web from massive datacentres”

Cloud Computing is a growing phenomenonCloud Computing is a growing phenomenon

US$10b

Global super-computing market US$160b

Source: Merrill Lynch report

Total revenues

Advertising revenues

In June 2008 Merrill Lynch predicted that the cloud computing market could reach US$160bn by 2011

Milestones in Utility / Grid / Cloud ComputingMilestones in Utility / Grid / Cloud Computing

1988 Condor

1997 The “Grid Fathers”

1999 Seti@home

2001 TeraGrid

2003 IBM “Deep Computing” on demand

2006 Sun Grid Engine

2007 Amazon Web Services – EC2 & S3

2008 “The Big Switch” – Nicholas Carr

CERN & Large Hadron Collider

IBM builds 3 cloud processing centres in 3 continents

Today ……… Where do we get it fromToday ……… Where do we get it from

The Cloud/s

What are the implications for New ZealandWhat are the implications for New Zealand

Amendments to Privacy Bill Act

- Ability of Privacy Commissioner to restrict transfer of data

to a territory of weak privacy protection or where NZ Privacy Act might be evaded

– Privacy request not restricted to NZer, Perm Resident or in NZ

- Facilitates referral of complaint to overseas privacy enforcement authority

High data transfer costs

Faster / Cheaper research

Unlimited storage and processing

Service level agreements …..( and enforcement )

Future TrendsFuture Trends

GLOBAL

Massive Data Centres………near Hydro plants

Dynamic provisioning

“free processing & storage” – in the Cloud

Personalised marketing

Legal test cases

In New Zealand

NZSC v2.0

The Green Button

High data transfer costs

Faster / Cheaper research

Unlimited storage and processing

Service level agreements …..( and enforcement )

NZSC: v2.0NZSC: v2.0

New Capabilities

Access by Profile (one build with core resources – saved as an image)

Dynamic provisioning

Web interface

Software as a Service – Linked by profile (Server and App based)

Virtualised Storage – 3 Tier (On, Near, Archived) driven by Proc and SaaS requirements

Content Management Service

WWW

ZenWorks Orchestrator Server

Baremetal Provisioning

On-line

VPN/IPSec Tunnels

NZSC IBM Xeon 32 Bit Blade Centres (500+ Processors)

Upgraded Network Interface (Juniper)

NZ Based Client

NZ Based Client

NZ Based Client

Asterisk Management Interface

J 6350TX/RX 0/0 LINK TX/RX 0/1 LINK TX/RX 0/2 LINK TX/RX 0/3 LINK

10/100/1000 CONSOLE AUX

0

1

USB

SLOT NUMBER

123

456

STATUS

POWER

ALARM HA

POWER RESETCONFIG

Near line

Archived

Lustre – Virtualised Storage Solution

q WinXPq Win Svr 2008q SQL Serverq Oracle

q Deep Serverq Claritasq Geniusq Student Managementq Etc.

Deployable Images & Services

Overseas Client

Virtualised Server resources supplying SAAS model

KAREN / City Link Dark Fibre connections

Commoditising the cloudCommoditising the cloud

Encrypted task

US$0.01c cpu / hr

Cloud Computing providors

Process request →← Process result

Users selects Green Button from within

Application

Or Set up an Account

InterGrid Aggregates demand and buys at the

best rate from Cloud Computing Providers

The Green Button is an API that is embedded in the The Green Button is an API that is embedded in the applicationapplication

Cloud Computing Privacy IssuesCloud Computing Privacy Issues

Maximise individual user control

Create anonymous services for individual users

Create Facilities for use of multiple identities

Limit identity information and authentication to high level transactions

Anonymise personal information

Encrypt data if it contains personal information

Compartmentalise data processing and storage

Control unique identifiers

Manage (explicitly) privacy and security requirements between cloud service providers

Give notice about privacy

Support the development of privacy enhancing technologies

Use Privacy Impact Assessment

Co-ordinate privacy enforcement and compliance across jurisdictions

IndividualsIndividualsConnecting to Connecting to

the cloudthe cloud

Cloud ComputingCloud ComputingProvidersProviders

In General In General

Thank you…………Thank you…………

Questions & DiscussionQuestions & Discussion

scott.houston@nzsc.co.nzscott.houston@nzsc.co.nz