Access Control In Cloud Computing Research Articles

A Block Chain-Based Access Control Framework with Privacy Protection in Cloud

Access control is a pivotal aspect of modern computing systems, ensuring that only authorized entities can interact with sensitive data and resources. Traditional access control methods, while effective, face challenges in terms of security, transparency, and scalability. Blockchain technology has emerged as a promising solution to enhance access control in cloud computing environments. Blockchain's inherent features, such as decentralization, immutability, and cryptographic security, offer a unique framework for addressing the limitations of traditional access control systems. In this paper, we explore the integration of blockchain technology with cloud computing to establish a more secure and transparent access control mechanism. By utilizing blockchain, access control policies and permissions can be stored in a tamper-proof and transparent ledger. Scalability is an issue since processing many access control transactions on the blockchain might cause network congestion and sluggish processing. Transactions take time to upload to the blockchain, which can delay real-time access choices. It takes skill to integrate and manage blockchain and cloud technologies together. Choosing the correct consensus mechanism affects system efficiency and security. Consider the costs of establishing and maintaining such a system and the difficulty of fixing faults owing to blockchain immutability. In conclusion, this paper underscores the significance of access control in cloud computing and the limitations of traditional approaches. By harnessing the power of blockchain technology, a more secure, transparent, and scalable access control framework can be established, revolutionizing the way we manage access to sensitive data and resources in complex digital ecosystems.

The Evolution of Access Control in Cloud Security: A Survey of Key Literature

Cloud Computing is a distributed model that enables users to access, meet and exchange resources and resource requirements hosted by various service providers. Authentication of requesting users and the permitting of their rights of access are extremely necessary in order to avoid unauthorised or unlawful access to cloud services. In the cloud scenario, access control of distributed resources is most critical. Access control is a basic aspect of the security of information that is directly linked to the fundamental features of confidentiality, honesty and availability. This article provides a literature analysis of the Cloud Computing Access Control Mechanism.

A Brief Review on Cloud Computing Authentication Frameworks

Cloud computing is among the most widely used technologies worldwide as it helps individual users and organizations to store and share information conveniently and cost-effectively. However, data security is a major concern in cloud computing. Security involves guaranteed access to the data only to authorized users and protection against various threats and attacks. Security is generally achieved through the appropriate and efficient implementation of access control, authentication, and authorization mechanisms. Various frameworks have been proposed and implemented for authentication and access control in cloud computing. This paper discusses some of the main authentication frameworks in cloud computing, highlighting their methodologies, algorithms, and problems and identifying the issues that should form the focus of research in the area.

Hierarchical Access Control in Cloud Computing

Access control is an essential security component of cloud computing, and hierarchical access management is of particular interest because different access privileges are granted in practice. As a solution to versatile and fine-grained hierarchical access control in cloud computing, this paper also presents a hierarchical key assignment scheme based on linear geometry. The encryption key of each class in the hierarchy is connected with a private vector and a public vector in our scheme, and the inner product of an ancestor class's private vector as well as the public variable of its decedent’s class could be used to deduce the encryption method of that descendant class. The proposed scheme is among the direct access strategies on hierarchical access control, which also means so each class at a higher level can straight derive this same encryption key of its decedent’s class without and need to iterate. In furthermore to this basic hierarchy key derivation, we propose a dynamic key management mechanism to handle possible changes in the hierarchy efficiently. Under the assumption of pseudo - random number functions, our scheme requires only light computations over a finite field by providing strong key in-distinguishability. Furthermore, the simulation demonstrates that our scheme maximises the trade-off among computation consumption as well as storage space.

Access Control: Ciphertext Policy - Attribute Based Encryption in Cloud Computing

Access control and confidentiality is important features for cloud storage. The cloud service allows data owner to outsource their data to the cloud and through which provide the data access to the users. Although cloud computing brings many benefits, it may suffer from conventional distributed systems’ security attacks. Because the cloud server and the data owner are not in the same trust domain, the semi-trusted cloud server cannot be relied to enforce the access policy. However, storing the data in the untrusted cloud server leads the privacy and access control issues in the cloud. The traditional encryption schemes such as symmetric and asymmetric schemes are not suitable to provide the access control due to lack of flexibility and fine-grained access control. One of the prominent cryptographic technique to provide privacy and fine-grained access control in cloud computing is Attribute Based Encryption. In this paper, access control ABAC framework will be introduced for cloud storage systems that achieves finegrained access control based on an adapted Ciphertext-Policy Attribute-based Encryption (CP-ABE) approach.

Data Access Control in Cloud Computing: Flexible and Receiver Extendable

Broadcast encryption provides a promising technique of data access control for specified users in cloud computing. A data uploader can generate a ciphertext for a set of chosen users such that only the intended users are able to access the data. However, with the rapidly increasing of collaboration between users, it is desired to extend the receiver set to grant decryption right for more users. The existing broadcast encryption systems cannot support receiver extension. In this article, we for the first time take this problem into consideration and give a solution. We take the merits of identity-based cryptosystem and propose a notion of EIBBE: a flexible data access control with receiver extendable for cloud computing based on broadcast encryption. It allows the authorized user to extend the receiver set <inline-formula><tex-math notation="LaTeX">$S$</tex-math></inline-formula> stated in the IBBE ciphertext by adding a new receiver set <inline-formula><tex-math notation="LaTeX">$S^{\prime }$</tex-math></inline-formula> without re-encryption. Both the users in <inline-formula><tex-math notation="LaTeX">$S$</tex-math></inline-formula> and <inline-formula><tex-math notation="LaTeX">$S^{\prime }$</tex-math></inline-formula> can access the data successfully. Moreover, the data uploader determines the maximum number of extended receivers. We then give a concrete construction of EIBBE and provide a rigorous security analysis of our proposed scheme. Finally, we demonstrate the scheme's efficiency and feasibility.

WITHDRAWN: Threshold secret sharing and multi-authority based data access control in cloud computing

The composition of virtualization, grid computing and distributed computing is known as cloud computing, and these systems are completely interconnected group of systems and which will dynamically provision and offering the one or more unified cloud-computing resources. The cloud service provider’s objective is to provide their services, to clients qualitative, more secure, abrupt, scalable, more responsive, cost-efficient, on demand and automatically provisioned services just like: storage services, computation services, network system etc. Cloud services are geographically dispersed everywhere throughout the world in a transparent way and help to improve business execution by making a commitment to decrease the expense of conveying IT assets to any association. Cloud services implementation helping to reduce in a organization is controlling IT resources the cost. These cloud services demands are day by day rapidly increase as financial model applied in cloud computing is “Pay-per-Use”. In cloud computing data security and data access control issues are most important requirements, presently some schemes are given to provide the data security and data access control in cloud computing but they have limitations in some ways such that by violating the data secrecy/confidentiality because of collusion-attack and too much processing (because of using maximum no of secret keys). To counter these important security issues in cloud computing we have proposed a system that uses attribute based encryption technique, threshold secret sharing and multi-authority access control mechanism in which the data owner divides the users in group and allocates the single secret key for entire Group to Decrypt the Data and Individual User in the created Group Shares Parts of the Secret Key. Proposed system provides strong data confidentiality, & also it reduces the usage of large no of Secret Keys.

A Novel Hybrid Approach for Access Control in Cloud Computing

A Novel Hybrid Approach for Access Control in Cloud Computing

Efficient Data Access Control for Cloud Computing With Large Universe and Traceable Attribute-Based Encryption

Ciphertext-policy attribute-based encryption (CP-ABE) schemes provide fine-grained access control for the data stored in cloud computers. However, commercial CP-ABE applications need a new encryption scheme for providing two properties such as: supporting large universe attribute and traceability. First, a large universe attribute allows the attribute authority to use any number of attributes in the system. i.e., the attribute universe is dynamic, and it is not fixed at the setup phase. Second, traceable CP-ABE systems trace the dishonest users who intentionally leak the private key for their profit. In this article, a large universe CP-ABE system with white box traceability has been proposed. The attribute universe of the proposed technique is exponentially larger, and it is polynomially unbound. Further, this technique will trace the identity of users who involve in malicious activities. In addition, the proposed scheme can express any kind of monotonic tree access policies into linear secret sharing structure (LSSS). Compared with the existing schemes that are presented to achieve the same property, proposed scheme has achieved better experimental results and so it is applicable for commercial applications.

Enhanced security‐aware technique and ontology data access control in cloud computing

SummaryNowadays, security and data access control are some of the major concerns in the cloud storage unit, especially in the medical field. Therefore, a security‐aware mechanism and ontology‐based data access control (SA‐ODAC) has been developed to improve security and access control in cloud computing. The model proposed in this research work is based on two operational methods, namely, secure awareness technique (SAT) and ontology‐based data access control (ODAC), to improve security and data access control in cloud computing. The SAT technique is developed to provide security for medical data in cloud computing, based on encryption, splitting and adding files, and decryption. The ODAC ontology is launched to control unauthorized persons accessing data from storage and create owner and administrator rules to allow access to data and is proposed to improve security and restrict access to data. To manage the key of the SAT technique, the secret sharing scheme is introduced in the proposed framework. The implementation of the algorithm is performed by MATLAB, and its performance is verified in terms of delay, encryption time, encryption time, and ontology processing time and is compared with role‐based access control (RBAC), context‐aware RBAC and context‐aware task RBAC, and security analysis of advanced encryption standard and data encryption standard. Ultimately, the proposed data access control and security scheme in SA‐ODAC have achieved better performance and outperform the conventional technique.

Attribute-based Encryption for Cloud Computing Access Control

Attribute-based encryption (ABE) for cloud computing access control is reviewed in this article. A taxonomy and comprehensive assessment criteria of ABE are first proposed. In the taxonomy, ABE schemes are assorted into key-policy ABE (KP-ABE) schemes, ciphertext-policy ABE (CP-ABE) schemes, anti-quantum ABE schemes, and generic constructions. In accordance with cryptographically functional features, CP-ABE is further divided into nine subcategories with regard to basic functionality, revocation, accountability, policy hiding, policy updating, multi-authority, hierarchy, offline computation, and outsourced computation. In addition, a systematical methodology for discussing and comparing existing ABE schemes is proposed. For KP-ABE and each type of CP-ABE, the corresponding access control scenario is presented and explained by concrete examples. Specifically, the syntax of ABE is given followed by the adversarial model and security goals. ABE schemes are discussed according to the design strategies and special features and are compared in the light of the proposed assessment criteria with respect to security and performance. Compared to related state-of-the-art survey papers, this article not only provides a broader 12 categories of ABE schemes, but also makes a more comprehensive and holistic comparison. Finally, a number of open research challenges in ABE are pointed out.

One Implementation Method of Trust Evaluation Tool Used on Cloud Computing Service

In order to solve the trust problems between users and cloud computing service providers in cloud computing services, the existing trust evaluation technology and access control technology in the cloud computing service are analyzed. And the evaluation index of cloud computing is also analyzed. Users can calculate the relevant indicators of cloud computing service according to their own business goals, and choose the appropriate cloud computing services according to their own trust need. In addition, the reliability assessment method of users based on the service process is proposed. Cloud computing access control system can be used for user credibility evaluation, and it can handle user access requests according to user&amp;#039;s creditability. In the study, a cloud computing service trust evaluation tool is designed, and the modeling and architecture designs of trust evaluation are also given. The effectiveness of the method is verified by experiments on cloud computing service evaluation methods.

A Review on CP-ABE for Big Data Access Control in Cloud Computing

A Review on CP-ABE for Big Data Access Control in Cloud Computing

A Survey of Cloud Computing Access Control Technology

Cloud computing access control technology originated in the 1970s. The initial goal of this technology is to meet the requirements of the primary server for data access rights, identify the identity of the visitor through relevant procedures, and then set access rights based on the authentication result. And it also committed to protect important data and prevent the main server from being illegally invaded. With the development of technology, cloud computing access control technology has been widely used in computer systems, which has played a good role. This article will briefly discuss cloud computing access control technology research and present personal insights.

Research on Trust-Role Access Control Model in Cloud Computing

Abstract In order to ensure the security of data in cloud computing, a trust-role-based hybrid cloud computing access control model is proposed based on the combination of role-based and trust-based access control models. The model introduces the calculation of trust based on the role-based access control, that is, the user needs to verify the trust value in order to obtain the permission to access the data. Through the application in the local business system, it shows that the model can effectively solve the user’s legitimate access to the data in the cloud, that is, to protect the security of the data in the cloud. The trust-based access control model has good advantages in terms of system throughput and storage space. As the number of user requests increases, both access control methods increase significantly in terms of throughput, but when the number of user requests reaches 10, the system throughput of both access control methods decreases, but based on trust - The role’s access control method is always larger than the role-based access control method in terms of throughput, which roughly increases the total amount by about ten percent.

A Survey on Semantic Access Control in Cloud Computing

Cloud Computing is an attractive paradigm that changed the ways institutions and companies are managing their computing needs. It emerges as a new solution which ensures several benefits. However, like any other emerging technology, the issues and limitations are also many. Security has been one of the main barriers to the adoption of the Cloud paradigm, especially by organizations dealing with customers sensitive information. Access Control Policies (ACPs) have become an important issue in the security field of cloud computing. The cloud service providers are responsible for enforcing access control and they normally rely upon conventional access control mechanisms which are considered as a deprecated means. This paper presents the most known access control models and proposes an overview of the semantic access control approaches which use Semantic Web technologies in order to improve the security in a Cloud environment.

English

English

Security strategies for cloud identity management - a study

Emphasis on security for providing Access Control in Cloud computing environment plays a significant role. Cloud computing provides number of benefits such as resource sharing, low speculation and large storage space. Huge amount of information stored in cloud can be accessed from anywhere, anytime on pay-per use basis. Resources in cloud should be accessed only by the authorized clients. Access Control in cloud computing has become a critical issue due to increasing number of users experiencing dynamic changes. Authentication, authorization and approval of the access ensuring liability of entities from login credentials including passwords and biometric scan is essential. Also, the federated authentication management is secured. Current approaches require large-scale distributed access control in cloud environment. Data security and access control are the drawbacks in existing access control schemes. Due to the drawbacks in existing access control schemes such as privacy of information when susceptible information is stored in intermediary service provider a federated identity access management is essential. Access control applications majorly concentrate on Healthcare, Government Organizations, Commercial, Critical Infrastructure and Financial Institutions. This review illustrates a detailed study of access control models in cloud computing and various cloud identity management schemes.

Secure Software Rollback System

Users can utilize powerful computing resources in cloud computing, which brings users great convenience. However, cloud computing is also facing many challenges for data security as the users outsource their sensitive data to clouds, which are generally beyond the same trusted domain as data owners. To address this problem, access control, which grants access permissions to an authorized user, is considered as one of critical security mechanisms for data protection in cloud computing environment. However, due to the unpredictability of user identities and access behavior, access control in cloud computing has become a key security problem. In this project, we propose a self-adaptive access control model based on secure cloud computing environment. The secure cloud computing environment includes analyzer Engine, Detection Engine, Rollback Engine, execute parts and knowledge base, and the knowledge base is used to make decisions on access requests. We also propose our own algorithm to create the Secure Engine. The self-adaptive access control model based on Secure Cloud Computing Environment we proposed can be applied to cloud computing environment.

Survey of access control models and technologies for cloud computing

Access control is an important measure for the protection of information and system resources to prevent illegitimate users from getting access to protected objects and legitimate users from attempting to access the objects in ways that exceed what they are allowed. The restriction placed on access from a subject to an object is determined by the access policy. With the rapid development of cloud computing, cloud security has increasingly become a common concern and should be dealt with seriously. In this paper, we survey access control models and policies in different application scenarios, especially for cloud computing, by following the development of the internet as the main line and by examining different network environments and user requirements. Our focus in the survey is on the relationships among different models and technologies along with the application scenarios as well as the pros and cons of each model. Special attention will be placed on access control for cloud computing, which is reflected in the summaries of the access control models and methods. We also identify some emerging issues of access control and point out some future research directions for cloud computing.