Toward a New Extension of the Access Control Model ABAC for Cloud Computing

Ed-daibouni, Maryam; Lebbat, Adil; Tallal, S.; Medromi, Hicham

doi:10.1007/978-981-287-990-5_7

Cited by 13 publications

(6 citation statements)

References 9 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Access control is "a security technique that regulates who or what can view or use resources in a computing environment" [19]. Different types of access control exist, including Identity-Based Access Control (IBAC), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) [4]. While older, established blockchain technologies such as Bitcoin and Ethereum are nonpermissioned and therefore do not implement these types of access control systems, Hyperledger Fabric is a permissioned blockchain technology, which enforces it to perform access control.…”

Section: Secure Access Controlmentioning

confidence: 99%

Combining ID’s, Attributes, and Policies in Hyperledger Fabric

Gordijn

Kromes

Giannetsos

et al. 2023

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

This work aims to provide a more secure access control in Hyperledger Fabric blockchain by combining multiple IDs, attributes, and policies with the components that regulate access control. The access control system currently used by Hyperledger Fabric is first completely analyzed. Next, a new implementation is proposed that builds upon the existing solution but provides users and developers with easier ways to make access control decisions based on combinations of multiple ID's, attributes, and policies. Our proposed implementation encapsulates the Fabric CA client to facilitate attribute addition and simplify the process of registering and enrolling a newly created certificate (corresponding to a new user). This research, concludes that it is possible to combine multiple ID's, attributes, and policies with the help of Hyperledger Fabric's smart contract technology. Furthermore, it could be seen that the performance impact for real-world applications is negligible compared to the insecure case of always providing access to a resource without performing access control.Keywords: Blockchain • IPFS • Privacy • Security 1 A digital contract written into code that is stored and automatically executed on the nodes of a distributed blockchain network [6].

show abstract

Section: Secure Access Controlmentioning

confidence: 99%

Combining ID’s, Attributes, and Policies in Hyperledger Fabric

Gordijn

Kromes

Giannetsos

et al. 2023

Lecture Notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering

View full text Add to dashboard Cite

show abstract

“…Access control is "a security technique that regulates who or what can view or use resources in a computing environment" [19]. Different types of access control exist, including Identity-Based Access Control (IBAC), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) [4]. While older, established blockchain technologies such as Bitcoin and Ethereum are non-permissioned and therefore do not implement these types of access control systems, Hyperledger Fabric is a permissioned blockchain technology, which enforces it to perform access control.…”

Section: Secure Access Controlmentioning

confidence: 99%

Combining ID's, Attributes, and Policies in Hyperledger Fabric

Gordijn¹,

Kromes²,

Giannetsos³

et al. 2022

Preprint

View full text Add to dashboard Cite

This work aims to provide a more secure access control in Hyperledger Fabric blockchain by combining multiple ID's, attributes, and policies with the components that regulate access control. The access control system currently used by Hyperledger Fabric is first completely analyzed. Next, a new implementation is proposed that builds upon the existing solution but provides users and developers with easier ways to make access control decisions based on combinations of multiple ID's, attributes, and policies. Our proposed implementation encapsulates the Fabric CA client to facilitate attribute addition and simplify the process of registering and enrolling a newly created certificate (corresponding to a new user). This research, concludes that it is possible to combine multiple ID's, attributes, and policies with the help of Hyperledger Fabric's smart contract technology. Furthermore, it could be seen that the performance impact for real-world applications is negligible compared to the insecure case of always providing access to a resource without performing access control.

show abstract

“…The most famous existing products for protecting shared resources include Discretionary Access Control (DAC) [15], Mandatory access control (MAC) [16], Role-based access control (RBAC) [17], Attribute-Based Access Control (ABAC) [18]. When examining available solutions, it has been found that ABAC is specifically tailored to the needs of cloud environment [9]. Another important aspect is that this model evaluates rules against the attributes of the entities (subject and object) through the use of security policy.…”

Section: A Proposed Approachmentioning

confidence: 99%

Proposal for a Secure Data Sharing and Processing in Cloud Applications for Healthcare Domain

Marwan¹,

Karti²,

Ouahmane³

2021

IJITAS

View full text Add to dashboard Cite

Information Technology (IT) services have become an inherent component in almost all sectors. Similarly, the health sector has been recently integrating IT to meet the growing demand for medical data exchange and storage. Currently, cloud has become a real hosting alternative for traditional on-permise software. In this model, not only do health organizations have access to a wide range of services but most importantly they are charged based on the usage of these cloud applications. However, especially in the healthcare domain, cloud computing deems challenging as to the sensitivity of health data. This work aims at improving access to medical data and securely sharing them across healthcare professionals, allowing real-time collaboration. From these perspectives, they propose a hybrid cryptosystem based on AES and Paillier to prevent the disclosure of confidential data, as well as computing encrypted data. Unlike most other solutions, the proposed framework adopts a proxy-based architecture to tackle some issues regarding privacy concerns and access control. Subsequently, this system typically guarantees that only authorized users can view or use specific resources in a computing environment. To this aim, they use eXtensible Access Control Markup Language (XACML) standard to properly design and manage access control policies. In this study, they opt for the (Abbreviated Language for Authorization) ALFA tool to easily formulate XACML policies and define complex rules. The simulation results show that the proposal offers simple and efficient mechanisms for the secure use of cloud services within the healthcare domain. Consequently, this framework is an appropriate method to support collaboration among all entities involved in medical information exchange.

show abstract

Toward a New Extension of the Access Control Model ABAC for Cloud Computing

Cited by 13 publications

References 9 publications

Combining ID’s, Attributes, and Policies in Hyperledger Fabric

Combining ID’s, Attributes, and Policies in Hyperledger Fabric

Combining ID's, Attributes, and Policies in Hyperledger Fabric

Proposal for a Secure Data Sharing and Processing in Cloud Applications for Healthcare Domain

Contact Info

Product

Resources

About