A Federated Framework for Fine-Grained Cloud Access Control for Intelligent Big Data Analytic by Service Providers

Abstract

This paper proposes a novel data-owner-driven privacy-aware cloud data acquisition framework for intelligent big data analytics for service providers and users. To realize this idea, we propose three main components. The first one is a new global identity provider concept to support fine-grained access control for a federated outsourcing cloud, namely called P-FIPS (Privacy-enhanced Federated Identity Provider System), in which data owners perform identity access control with the operator of the federated outsourcing cloud so that the service providers can selectively use their encrypted data on the cloud for various purpose such as intelligent big data analytics. In P-FIPS, data owners manage the access privilege of service providers over their encrypted data on the cloud by (a) labeling the scope of use (e.g., user connection, user disconnection, user tracking) on each encrypted data on the cloud, and (b) by selectively providing the information regarding the data owners to the service provider. The label also includes the attributes related to the data owner's identity, and this allows service providers to locate the target data with the assist of cryptographic computation according to the scope of the use at the cloud outsourcing server. The second one is a new ambiguous data acquisition mechanism integrated with P-FIPS from a cloud to a service provider. The last one is the Decentralized Audit and Ordering (DAO) Chain mechanism which provides the correctness of obtained data to the service provider as well as ensures the owners that their data is being used for the approved purpose only. Most importantly, we show that our framework is much more efficient than the existing alternative in the scheme.

The Application of “Internet+” in the Ageing Adaptation of Elderly People with Disabilities at Home

“…rough the construction of the "Internet+" intelligent home care service platform, each disabled home elderly person who participates in the platform does not just become a basic member of the elderly service center, but more meaningful is the huge social support network that is accessed behind this membership network [12,13]. e eight service areas of mobility, medical care, meals, family support, shopping, emergency assistance, and fun and travel assistance allow the disabled elderly to access a rich network of professional resources at home with just a smartphone and a mobile web platform.…”

An assurance process for Big Data trustworthiness

“…More advanced techniques include continuous monitoring of the behavior of the data handlers, in order to identify malicious or unexpected actions [9,10]. Additional security mitigations solutions adopted anomaly detection techniques to detect model poisoning [43] or advanced access control and storage monitoring [44], although their focus is especially localized and small. Security assurance, on the other hand, enables its users to address privacy and security concerns by actively testing the whole Big Data pipeline environment, its configuration and its behavior, verifying a target set of nonfunctional properties, demonstrating if the applied countermeasures are effective [12].…”

A Federative Access Control in a Cloud Environment with a Publish/Subscribe Protocol

“…Its adoption is impeded by some concerns, especially between competitive organizations. Blockchain technology is widely used in recent works to allow access to privacy-enhanced data (Ra et al, 2021;Zhang et al, 2019;Wang et al, 2018;Sabzmakan and Mirtaheri, 2021). Ra et al (2021) proposes a labeled data access system with cloud outsourcing and a keyword search protocol with data linking token.…”

“…Blockchain technology is widely used in recent works to allow access to privacy-enhanced data (Ra et al, 2021;Zhang et al, 2019;Wang et al, 2018;Sabzmakan and Mirtaheri, 2021). Ra et al (2021) proposes a labeled data access system with cloud outsourcing and a keyword search protocol with data linking token. Zhang et al (2019;Wang et al, 2018) present a secure scheme against keyword guessing attacks, where users encrypt keywords using a dedicated key server.…”