Privacy Protection and Data Security in Cloud Computing: A Survey, Challenges, and Solutions

Abstract

Privacy and security are the most important issues to the popularity of cloud computing service. In recent years, there are many research schemes of cloud computing privacy protection based on access control, attribute-based encryption (ABE), trust and reputation, but they are scattered and lack unified logic. In this paper, we systematically review and analyze relevant research achievements. First, we discuss the architecture, concepts and several shortcomings of cloud computing, and propose a framework of privacy protection; second, we discuss and analyze basic ABE, KP-ABE (key policy attribute-based encryption), CP-ABE (ciphertext policy attribute-based encryption), access structure, revocation mechanism, multiauthority, fine-grained, trace mechanism, proxy re-encryption(PRE), hierarchical encryption, searchable encryption(SE), trust, reputation, extension of tradition access control and hierarchical key; third, we propose the research challenge and future direction of the privacy protection in the cloud computing; finally, we point out corresponding privacy protection laws to make up for the technical deficiencies. INDEX TERMS Cloud computing, privacy, access control, attribute-based encryption, trust.

A Trust-Game-Based Access Control Model for Cloud Service

“…e main contributions of our article are as follows: (1) We construct a trust model based on multiple factors, such as the direct trust, reward punishment, feedback trust, and trust risk, and the weight factor is determined by maximum discrete degree and information entropy. (2) We combine the trust evaluation results with the payoff matrix for game analysis and calculate the mixed Nash equilibrium strategy for the users and service providers. (3) We give the game control condition based on trust prediction and payment matrix to encourage subjects for honest access.…”

“…Time Decay Factor. In this section, t i is the time span of the ith transaction, t 1 i is the start time of the ith transaction, t 2 i is the end time of the ith transaction, t 0 is the time of user successful registration, and n is the number of interaction times between the service provider and user, so the decay time factor T (i) is expressed as follows:…”

“…Cloud computing is a very popular technology in the field of information technology and is highly valued by the government, academia, and industry [1,2]. For example, Apple and Amazon have launched cloud computing services, which allow personals and organizations to use dynamic computing infrastructure based on needs.…”

Data‐driven framework for the prediction of cutting force in turning

“…Preventing unauthorised access and periodic data backup are the other necessities. Researchers are thoroughly carrying out research to improve the level of encryption and to provide enhanced security and privacy to the data stored on a cloud‐based platform [53, 54]. However, this is not the focus of present work; implementation of data security and privacy in the context of the proposed framework is left as a future task.…”

A Novel Hybrid Approach for Access Control in Cloud Computing

“…Consequently, managing identities and access to cloud services is one of the primary security concerns. Hence, it is primordial to conceive flexible access control mechanisms to avoid unauthorized access [13,14]. Figure 1 shows how access control is managed in CC, it shows that the data owner sends it encrypted data to the cloud server.…”