A 4D-Role Based Access Control Model for Multitenancy Cloud Platform

Li, Jiangfeng; Liao, Zhenyu; Zhang, Chenxi; Shi, Yang

doi:10.1155/2016/2935638

Cited by 5 publications

(5 citation statements)

References 13 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The dynamic nature of the model alleviates the role explosion problem, but the security administrator does not define the management scope in the model and cannot resolve the inter-domain management conflict. In references [18][19][20], the concept of multi-dimensional roles is proposed to isolate tenants. Among them, reference [20] uses 4D-Role with user categories, and user categories include tenant users and platform users, making cloud platform management independent of tenant management.…”

Section: Related Workmentioning

confidence: 99%

“…In references [18][19][20], the concept of multi-dimensional roles is proposed to isolate tenants. Among them, reference [20] uses 4D-Role with user categories, and user categories include tenant users and platform users, making cloud platform management independent of tenant management. Strictly isolating users among different tenants is beneficial to privacy protection, but it is not conducive to information sharing among tenants.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Role-Based Access Control Model for Inter-System Cross-Domain in Multi-Domain Environment

et al. 2022

Applied Sciences

View full text Add to dashboard Cite

Information service platforms or management information systems of various institutions or sectors of enterprises are gradually interconnected to form a multi-domain environment. A multi-domain environment is convenient for managers to supervise and manage systems, and for users to access data across domains and systems. However, given the complex multi-domain environment and many users, the traditional or enhanced role-based access control (RBAC) model still faces some challenges. It is necessary to address issues such as role naming conflicts, platform–domain management conflicts, inter-domain management conflicts, and cross-domain sharing difficulties. For the above problems, a role-based access control model for inter-system cross-domain in multi-domain environment (RBAC-IC) is proposed. This paper formally defines the model, divides roles into abstract roles and specific roles, and designs the operating process of the access control model. The model has four characteristics: support role name repetition, platform–domain isolation management, inter-domain isolation management, and fine-grained cross-domain sharing. By establishing security violation formulas for security analysis, it is finally shown that RBAC-IC can operate safely.

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Related Workmentioning

confidence: 99%

Role-Based Access Control Model for Inter-System Cross-Domain in Multi-Domain Environment

et al. 2022

Applied Sciences

View full text Add to dashboard Cite

show abstract

“…Because there are many computer pirates and malicious users on the Internet, it is very important to ensure the confidentiality of the data in the medium of the cloud. For this purpose, it is seen that the number of cloud computing-based advanced access control models has been recently and rapidly increasing [10,11]. Behera and Khilar [12] developed a new access control method.…”

Section: Related Workmentioning

confidence: 99%

A New Scalable and Expandable Access Control Model for Distributed Database Systems in Data Security

Güçlü

Bakir

Hakkoymaz

2020

Scientific Programming

View full text Add to dashboard Cite

Access control models are an important tool developed for securing today’s data systems. Institutions use the access control models specifically to define who their employees are, what they can do, which resources they can reach, and which processes they can perform and use them to manage the whole process. This is a very hard and costly process for institutions with distributed database systems. However, access control models cannot be implemented in a qualified way due to the fact that the conditions for defining users’ demands to reach resources distributed on different servers, one of which is consequentially bound to the other, the verification and authorization of those user demands, and being able to monitor the actions of the users cannot be configured in an efficient way all the time. With our model suggested in this study, the aim is to automatically calculate the permissions and access levels of all users defined in the distributed database systems for the objects, and, in this way, we will reach a more efficient decision as to which objects the users can access while preventing their access to the information they do not need. Our proposed model in this study has been applied to real life data clusters from organizations providing health and education services and a public service. With the proposed model, all models have been run on servers sharing resources in a private network. The performance of the proposed model has been compared to that of traditional access models. It was confirmed that the proposed model presented an access control model providing more accurate access level results as well as being scalable to many distributed database systems.

show abstract

“…To measure the degree of expensiveness, the analysis is conducted in European Bank. 17 The analysis of administrative role-based access control (ARBAC) is done without the limitation of the distinct administration. 18 Various RBAC limitations are explained, and then the use of mining of limitation is executed by implementing traditional data mining tools at RBAC limitations.…”

Section: State-of-the-artmentioning

confidence: 99%

Privacy-based medical data protection against internal security threats in heterogeneous Internet of Medical Things

Habib

Faisal

Sarwar

et al. 2019

International Journal of Distributed Sensor Networks

View full text Add to dashboard Cite

Data and information security is considered to be an important and challenging task for any field of life. But it becomes more critical especially when it deals with the medical field due to life and health hazards. The ratio of internal security threats to external threats always remains high. A huge number of efforts and technical expertise are required in the case of attacking the system from the external environment. But it requires fewer efforts if a system is attacked internally by the stakeholders of the system. This article presents an access control model that secures the medical data of patients against internal cybersecurity threats. It allows only the legitimate users, that is, authorized patients and doctors to communicate despite the fact of physical boundaries. The proposed model implements authorization in combination with permissions and roles instead of roles only for medical staff. It removes the discrepancies in the existing access control models. The proposed model ensures communication among doctors and patients in a secure, private, and efficient manner. The model is demonstrated by using mathematical modeling along with implementation examples. The proposed model outperformed in comparison with state-of-the-art access control models.

show abstract

A 4D-Role Based Access Control Model for Multitenancy Cloud Platform

Cited by 5 publications

References 13 publications

Role-Based Access Control Model for Inter-System Cross-Domain in Multi-Domain Environment

Role-Based Access Control Model for Inter-System Cross-Domain in Multi-Domain Environment

A New Scalable and Expandable Access Control Model for Distributed Database Systems in Data Security

Privacy-based medical data protection against internal security threats in heterogeneous Internet of Medical Things

Contact Info

Product

Resources

About