评论
打印
Unlike sharing family photos on Facebook where anyone can see them,
不同于在“脸书”上共享家人照片，可以让所有人看到，
a user can upload the files to a cloud service protected by a password called the key.
用户可以上传文件到云端，保护文件的密码称为密钥。
Only those who know the key can have the access to the uploaded files.
只有知道密钥的人才能访问上传的文件。
Instead of investing in large data storage, businesses can keep their files in a cloud and share them with their remote offices,
与其用大数据存储，企业不如将其文件保存在云端，与远程办公室共享。
but distributing the keys and updating them when a client wants to change who can access the data may create problems.
但当客户想更改谁可以访问数据时，他需要更新并重新发放密钥，这时候就会出现问题。
Updating the users in a group or the permissions that a group has in the system,
当需要更新组中的用户或更新组中的权限时，
you start seeing these cascading needs to download files, decrypt them, re-encrypt them, re-upload them and redistribute keys.
下载文件、解密它们、重新加密它们、重新上传它们和重新分配密钥的需求接踵而来。
Cloud storages are also prone to hacking.
云存储也容易被黑客攻击。
During the first half of 2017, there have been almost 800 data breaches into cloud platforms in the US.
2017上半年，美国云端平台发生了近800起数据泄露事件。
Scientists at the University of Pittsburgh say they want to create a system in which all encryption will stay on the client's machine,
匹兹堡大学的科学家们说，他们希望建立一个系统，在这个系统中，所有的加密都将留在客户机上，
so the client will be able to control not only access to date but also what any of the users will be allowed to do with it.
客户不仅可以控制数据，还能控制用户的使用权限。
The mentality that we are taking with this is that it's much easier to change the software on my machine
我们想做的是改变客户机的软件，
than it is to convince a service provider to completely change the way that they're doing things.
这比说服供应商完全改变模式要容易得多。
The client will be able to identify the shared folders they want to protect,
客户能够识别他们想要保护的共享文件夹，
set the policy of who is allowed to see what and the rest will happen behind the scenes.
设置允许谁看，能看什么，其余的都是在电脑后台操作。
We're more focused on the policy enforcement, so we're allowing a user to basically dictate
我们更专注于政策的执行，所以基本上，我的用户能做的
not necessarily what a provider can do but what everyone can do with their data.
不一定非要像供应商一样，而是去操控人们对数据的使用范围。
Researcher say their new app for a better encryption of cloud storage may be ready for download within a year.
研究人员说，他们的云储存加密应用程序大概在一年内就可以下载。
George Putic, VOA News, Pittsburgh.
美国之音新闻，乔治·普提克匹兹堡报道。
