Bug 1130678 - [RFE][nova]: HW Assisted Geo location and Boundary Control in the cloud
Summary: [RFE][nova]: HW Assisted Geo location and Boundary Control in the cloud
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: RFEs
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: RHOS Maint
QA Contact:
URL: https://blueprints.launchpad.net/nova...
Whiteboard: upstream_milestone_none upstream_defi...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-08-16 04:01 UTC by RHOS Integration
Modified: 2015-03-19 17:36 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Enhancement
Doc Text:
Clone Of:
Environment:
Last Closed:


Attachments (Terms of Use)

Description RHOS Integration 2014-08-16 04:01:53 UTC
Cloned from launchpad blueprint https://blueprints.launchpad.net/nova/+spec/nova-trusted-geo-asset-tag.

Description:

One of the key requirements for certain workloads moving from cloud servers from one location to another have to meet certain laws for data security, privacy, and other aspects of compliance.  Determining the approximate physical location of a computing device, such as a cloud computing server, can be accomplished in many ways with traditional methods secured through operational controls and therefore cannot be trusted to meet cloud security needs. 
The use case is to establish an automated hardware root of trust method for enforcing and monitoring geo location or boundary restrictions for cloud servers . A hardware root of trust is an inherently trusted combination of hardware and firmware that maintains the integrity of the platform and the asset/geo tag information that is stored in tamper-resistant hardware. This information is accessed by Cloud management and security tools using secure protocols to assert the integrity of the platform and Asset/Geo tag information of the computing device

Specification URL (additional information):

https://wiki.openstack.org/wiki/Trusted-Location-Control


Note You need to log in before you can comment on or make changes to this bug.