Enhancing highly-collaborative access control system using a new role-mapping algorithm

Abstract

The collaboration among different organizations is considered one of the main benefits of moving applications and services to a cloud computing environment. Unfortunately, this collaboration raises many challenges such as the access of sensitive resources by unauthorized people. Usually, role based access-control (RBAC) Model is deployed in large organizations. The work in this paper is mainly considering the authorization scalability problem, which comes out due to the increase of shared resources and/or the number of collaborating organizations in the same cloud environment. Therefore, this paper proposes replacing the cross-domain RBAC rules with role-to-role (RTR) mapping rules among all organizations. The RTR mapping rules are generated using a newly proposed role-mapping algorithm. A comparative study has been performed to evaluate the performance of the proposed algorithm with concerning the rule-store size and the authorization response time. According to the results, it is found that the proposed algorithm achieves more saving in the number of stored role-mapping rules which minimizes the rule-store size and reduces the authorization response time. Additionally, the RTR model using the proposed algorithm has been implemented by applying a concurrent approach to achieve more saving in the authorization response time. Therefore, it would be suitable in highly-collaborative cloud environments

N-Accesses: A Blockchain-Based Access Control Framework for Secure IoT Data Management

“…In [18], an access control framework consisting of a Cyber-Physical Access Control Model (CPAC) and a Generalized Action Generation Model (GAGM) was proposed, which aims to augment the enforcement of authorization policies for healthcare. However, the scalability of the RBAC schemes [18][19][20] may be affected by the large number of dynamic users and roles that are involved in conglomerate networks [10], and moreover, the permission-role assignment is hard to change.…”

Design of matrix, distributive round robin, ping pong and enhanced ping lock arbiter for shared resources systems

“…Dynamic congestion mechanism proposed forwarding rule that can be applied to select high-priority from the cloud service [28]. The role-mapping algorithm strategy reaches more saving in the amount of stored role-mapping rules that reduces the size of rule-store also minimizes the response time [29]- [31].…”