A Survey of Extended Role-Based Access Control in Cloud Computing

Abstract

Access control is one of the key mechanisms for cloud computing security. When it comes to being used in cloud computing environments, RBAC is more scalable and more suitable compared with traditional discretionary and mandatory access control models. A straightforward way is to extend RBAC from traditional fields to cloud computing environments. In this chapter, several extended role-based access control schemes are surveyed from basic extension, A-RBAC, and trust-based RBAC separately. Core techniques of the proposed schemes are detailed. Comparisons around the proposed schemes are analyzed. Keywords Cloud computing • Access control • RBAC • A-RBAC • Trust IntroductionNowadays, cloud computing is becoming one of the most popular and trendy computing model in the technology world. In cloud computing model, access is performed through network which has the characteristics of ubiquity, convenience, and service-on-demand. The computing resource is a configurable shared pool consisting of networks, servers, storage, applications, and services [1]. There are different slots or sections of a cloud service. Among them, infrastructure as a service (IaaS), platform as a service (PaaS), and software as a service (SaaS) are the three service models. With the cloud computing having more and more deployment, security issues have become important factors restricting its development and application [2].Access control is the process of limiting access to system resources for only authorized people, programs, processes, or other system components, which plays an important role in the field of information security. Traditionally, there are three kinds of access control models: (1) discretionary, (2) mandatory, and (3) role based [3]. Among the three models, RBAC model is the most scalable, especially in such cases that tracking the users of the services cannot get through a fixed identity.

Mobile edge computing, Fog et al.: A survey and analysis of security threats and challenges

“…As for the existence of federated and distributed access control architectures in other related paradigms, there is actually an extensive literature on this subject [89,90]. Several of these mechanisms might be adapted to our context in order to solve existing open issues.…”

HEAD Metamodel: Hierarchical, Extensible, Advanced, and Dynamic Access Control Metamodel for Dynamic and Heterogeneous Structures

“…Moreover, to enhance an AC model in order to define additional rules, some AC models are extended by adding new component(s) to them. For example, in [ 23 ], a survey of an extended RBAC model in cloud computing is presented. In addition, an ABAC model extension is presented in [ 8 ], called hierarchical group and attribute-based access control (HGABAC), where groups and hierarchies of subjects and objects are added.…”

SARSA based access control with approximation by TileCoding

“…Task-role-based Access Control Task-role-based Access Control(T-RBAC) [19] is an Access Control Model Based on the enterprise environment. Unlike RBAC, the T-RBAC model treats tasks and roles as equals.…”