美国政府云计算技术路线图SP-500-293(卷一)

SpecialPublication500-293(Draft)USGovernmentCloudComputingTechnologyRoadmapVolumeIRelease1.0(Draft)High-PriorityRequirementstoFurtherUSGAgencyCloudComputingAdoptionLeeBadger,DavidBernstein,RobertBohn,FredericdeVaulx,MikeHogan,JianMao,JohnMessina,KevinMills,AnnieSokol,JinTong,FredWhitesideandDawnLeafNISTCloudComputingProgramInformationTechnologyLaboratoryThispageleftintentionallyblankU.S.DepartmentofCommerceJohnE.Bryson,SecretaryNationalInstituteofStandardsandTechnologyPatrickD.Gallagher,UnderSecretaryforStandardsandTechnologyandDirectorNISTSpecialPublication500-293(Draft)USGovernmentCloudComputingTechnologyRoadmapVolumeIRelease1.0(Draft)High-PriorityRequirementstoFurtherUSGAgencyCloudComputingAdoptionLeeBadger,DavidBernstein,RobertBohn,FredericdeVaulx,MikeHogan,JianMao,JohnMessina,KevinMills,AnnieSokol,JinTong,FredWhitesideandDawnLeafCloudComputingProgramInformationTechnologyLaboratoryNationalInstituteofStandardsandTechnologyGaithersburg,MD20899November2011InformationTechnologyLaboratoryUSGovernmentCloudComputingTechnologyRoadmapVolumeI,Release1.0(Draft)ReportsonComputerSystemsTechnologyTheInformationTechnologyLaboratory(ITL)attheNationalInstituteofStandardsandTechnology(NIST)promotestheU.S.economyandpublicwelfarebyprovidingtechnicalleadershipforthenation’smeasurementandstandardsinfrastructure.ITLdevelopstests,testmethods,referencedata,proofofconceptimplementations,andtechnicalanalysistoadvancethedevelopmentandproductiveuseofinformationtechnology.ThisSpecialPublication500-seriesreportsonITL’sresearch,guidance,andoutreacheffortsinInformationTechnologyanditscollaborativeactivitieswithindustry,government,andacademicorganizations.NationalInstituteofStandardsandTechnologySpecialPublication500-293(Draft)Natl.Inst.Stand.Technol.Spec.Publ.500-293,32pages(November2011)Certaincommercialentities,equipment,ormaterialsmaybeidentifiedinthisdocumentinordertodescribeanexperimentalprocedureorconceptadequately.SuchidentificationisnotintendedtoimplyrecommendationorendorsementbytheNationalInstituteofStandardsandTechnology,norisitintendedtoimplythattheentities,materials,orequipmentarenecessarilythebestavailableforthepurpose.USGovernmentCloudComputingTechnologyRoadmap,VolumeI,Release1.0(Draft)November2011Page5AcknowledgmentsTheauthors,DavidBernstein,JianMao,andJinTong,ofKnowceanConsultingIncorporated(undercontractthroughtheFederalIntegratedProductTeam,Space&NavalWarfare[SPAWAR]SystemsCenterAtlantic),FredericdeVaulxofPrometheusComputingLLC(undercontract),LeeBadger,RobertBohn,MikeHogan,JohnMessina,KevinMills,AnnieSokol,FredWhiteside,andDawnLeafoftheNationalInstituteofStandardsandTechnology(NIST),gratefullyacknowledgeandappreciatethebroadcontributionsfrommembersoftheNISTCloudComputingUSGTargetBusinessUseCase,ReferenceArchitectureandTaxonomy,StandardsAccelerationtoJumpstarttheAdoptionofCloudComputing(SAJACC),Security,andStandardsworkinggroups.WeespeciallyacknowledgeLisaCarnahan,RomayneHines,MichaelaIorga,MarySaunders,TerrySchwarzhoff,andJamesSt.PierreofNISTforprovidingeditorialreviewandsupport.WeespeciallyacknowledgeEarlCrane,oftheDepartmentofHomelandSecurityandInformationSecurityandIdentityManagementCommittee(ISIMC),whoseadviceandtechnicalinsightassistedthiseffort.WealsowishtoacknowledgethemembersoftheFederalCloudComputingStandardsandTechnologyWorkingGroupandotherinteragencycontributors,listedinAppendixAofthisdocument.Additionalacknowledgmentswillbeaddeduponthefinalpublicationofthisguideline.USGovernmentCloudComputingTechnologyRoadmap,VolumeI,Release1.0(Draft)November2011Page6ThispageleftintentionallyblankUSGovernmentCloudComputingTechnologyRoadmap,VolumeI,Release1.0(Draft)November2011Page7TableofContentsExecutiveSummary.................................................................................................................91PurposeandScope.........................................................................................................121.1USGCloudComputingTechnologyRoadmapPurpose................................................121.2IntendedAudienceandUse............................................................................................121.3DocumentOrganization.................................................................................................132USGCloudComputingTechnologyRoadmapRequirements.....................................142.1Requirement1:InternationalVoluntaryConsensus-BasedInteroperability,Portability&SecurityStandards....................................................................................................................152.2Requirement2:SolutionsforHigh-PrioritySecurityRequirements.................................162.3Requirement3:TechnicalSpecificationsforHigh-QualityService-LevelAgreements.172.4Requirement4:Clear&ConsistentlyCategorizedCloudServices..............................182.5Requirement5:FrameworkstoSupportFederatedCommunityClouds......................192.6Requirement6:TechnicalSecuritySolutionsDe-coupledfromOrganizationPolicy.202.7Requirement7:DefinedUniqueGovernm