A novel attribute-based access control system for fine-grained privacy protection
A novel attribute-based access control system for fine-grained privacy protection
复制标题
一种新颖的基于属性的细粒度隐私保护访问控制系统
DOI：
10.1145/3309074.3309091
复制
发表时间：
2019
期刊：
影响因子：
--
通讯作者：
N. M. Hoang
中科院分区：
文献类型：
--
作者：
H. Son;N. M. Hoang
由于设计简单且水平扩展和性能高效，公共云最近已成为在 Web 应用程序上实时共享数据的流行平台。然而，迄今为止，对于公共云的隐私保护还没有进行充分的研究。虽然许多研究都承认这个问题，但最近的研究尚未提供用于云系统中隐私保护的细粒度访问控制系统。随着数据集变得越来越大，我们不得不面对更多的隐私挑战。在本文中，我们提出了一个在公共云中实施基于属性的安全保护的综合框架，并通过使用以 XML 格式定义的隐私来实现数据隐私保护的特征。通过所提出的模型，请求不仅可以根据访问目的进行评估，还可以根据主题、操作、资源、环境属性进行评估。通过实验来说明访问决策的处理时间与策略复杂度之间的关系。
Public cloud have recently become popular platform for sharing data in real-time on web applications due to their simplicity in design and effectiveness in horizontal scaling and performance. However, no proper consideration has been fully investigated so far in privacy protection for public cloud. While many studies have acknowledged this issue, recent studies have not provided a fine-grained access control system for privacy protection in cloud system. As the data set becomes larger, we have to confront more privacy challenges. In this paper, we propose a comprehensive framework for enforcing attribute-based security protection in the public cloud together with the feature of data privacy protection by using privacy which define in XML format. With the proposed model, a request can be evaluated not only by access purpose but also by subject, action, resource, environment attributes. The experiment is carried out to illustrate the relationship between the processing time for access decision and the complexity of policies.