Permission Management System: Permission as a Service in Cloud Computing

Echeverria, Victor T. E.; Liebrock, Lorie M.; Shin, Dongwan

doi:10.1109/compsacw.2010.71

Cited by 17 publications

(6 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Hu et al [7] proposed a work that is based on distributed role base control for web technology. Echeveria et al [5] proposed a solution for the de-coupling access control using attribute encryption.…”

Section: Related Workmentioning

confidence: 99%

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

Hingwe

Bhanu

2016

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

Database-as-a-service provides services for accessing and managing customers data which provides ease of access, and the cost is less for these services. There is a possibility that the DBaaS service provider may not be trusted, and data may be stored on a untrusted server. The access control mechanism can restrict users from unauthorized access, but in cloud environment access control policies are more flexible. However, an attacker can gather sensitive information for a malicious purpose by abusing the privileges as another user and so database security is compromised. The other problems associated with the DBaaS is to manage role hierarchy and secure session management for query transaction in the database. In this paper, a role based access control for the multitenant database with role hierarchy is proposed. The query is granted with least access privileges, and a session key is used for session management. The proposed work protects data from privilege escalation and SQL injection. It uses the partial homomorphic encryption (Paillier Encryption) for the encrypting the sensitive data. If a query is to perform any operation on sensitive data, then extra permissions are required for accessing sensitive data. Data confidentiality and integrity are achieved by using the role-based access control with partial homomorphic encryption.

show abstract

Section: Related Workmentioning

confidence: 99%

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

Hingwe

Bhanu

2016

Advances in Intelligent Systems and Computing

View full text Add to dashboard Cite

show abstract

“…Different approaches to the cloud access control problem have been published in the literature. V. Echevarrıa et al [11] have developed a novel approach called Permission as a Service (PaaS) which provides a separate access control service from the other cloud services. In PaaS, user data is encrypted in the cloud, using attribute based encryption (ABE), to maintain confidentiality.…”

Section: Current State Of the Artmentioning

confidence: 99%

My private cloud – granting federated access to cloud resources

Chadwick

Casenove

Siu

2013

Journal of Cloud Computing: Advances, Systems and Applications

View full text Add to dashboard Cite

We describe the research undertaken in the six month JISC/EPSRC funded My Private Cloud project, in which we built a demonstration cloud file storage service that allows users to login to it, by using their existing credentials from a configured trusted identity provider. Once authenticated, users are shown a set of accounts that they are the owners of, based on their identity attributes. Once users open one of their accounts, they can upload and download files to it. Not only that, but they can then grant access to their file resources to anyone else in the federated system, regardless of whether their chosen delegate has used the cloud service before or not. The system uses standard identity management protocols, attribute based access controls, and a delegation service. A set of APIs have been defined for the authentication, authorisation and delegation processes, and the software has been released as open source to the community. A public demonstration of the system is available online.

show abstract

“…Thus, DSP can authorize data users without seeing data. V. Echeverria et al [70] proposed an idea to control an access of user data in Cloud; that is called Permission as a Service. It separates access control from other services to provide a separate service in the cloud.…”

Section: Authentication and Access Control Level Security Issuesmentioning

confidence: 99%

A survey on security issues and solutions at different layers of Cloud computing

et al. 2012

View full text Add to dashboard Cite

This is the accepted version of the paper.This version of the publication may differ from the final published version. Permanent AbstractCloud computing offers scalable on-demand services toconsumers with greater flexibility and lesser infrastructure investment. Since Cloud services are delivered using classical network protocols and formats over the Internet, implicit vulnerabilities existent in these protocols as well as threats introduced by newer architectures raise many securityand privacy concerns. In this paper, we survey factors affecting Cloud computing adoption, vulnerabilities,and attacks, and identify relevant solution directives to strengthen security and privacyin Cloud environment.

show abstract

Permission Management System: Permission as a Service in Cloud Computing

Cited by 17 publications

References 12 publications

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

Hierarchical Role-Based Access Control with Homomorphic Encryption for Database as a Service

My private cloud – granting federated access to cloud resources

A survey on security issues and solutions at different layers of Cloud computing

Contact Info

Product

Resources

About