Collaborative Access Control for Multi-Domain Cloud Computing

Abstract

SUMMARYThe Internet infrastructure is evolving with various approaches such as cloud computing. Interest in cloud computing is growing with the rise of services and applications particularly in business community. For delivering service securely, cloud computing providers are facing several security issues, including controlling access to services and ensuring privacy. Most of access control approaches tend to a centralization of policy administration and decision by introducing a mediator central third party. However, with the growth of the Internet and the increase of cloud computing providers, a centralized administration is no longer supported. In this paper, we present a new collaborative access control infrastructure for distributed cloud computing environment, supporting collaborative delegations across multiple domains in order to authorize users to access services at a visited domain that does not have a direct cooperative relationship with the user's home domain. For this purpose, we propose an extension of the XACML (eXtensible Access Control Markup Language) model with a new entity called Delegation Validation Point (DVP) to support multidomain delegation in a distributed environment. We describe the new extended model and functionalities of the new component. In addition, we define new XACML messages for acquiring delegation across domains. For exchanging delegation between domains we use SAML (Security Association Markup Language) and Diameter protocol. Two Diameter applications are defined for transporting securely multiple delegation requests and answers and for building a trusted path of cooperation to acquire the chain of delegations. We detail the implemented prototype and evaluate performance within a testbed of up to 20 domains.

Access Control Mechanism for Social Internet of Things

“…The blockchain technology is used to implement smart contracts which maintains the permission delegations [26]. In the absence of access permissions, a user can look for a permission delegation path made up of a chain of collaborative domains linking his local domain to the remote target domain [34]. However, all intermediary delegations require to be validated by its delegator in the chain of delegations.…”

Dynamic Access Control Model for Security Client Services in Smart Grid

“…Recently, with the development of renewable energy, interest in efficient energy management has increased. The nextgeneration intelligent power grid, smart grid, unlike existing provider-centered one-way energy operation systems, is a two-way operating system in which consumers participate in energy use and operation [1][2][3]. In addition, smart grid technology, interlocked with home networks, allows the control of information appliances no matter when or where the user is.…”