Research on Adaptive Relationship Between Trust and Privacy in Cloud Service

Abstract

To prevent privacy leakage, cloud services need to take corresponding methods, so participants often face the dilemma of service utility and privacy protection. In this paper, we propose a dynamic adaptive access control model based on trust permission and privacy protection to solve the problem of privacy disclosure and utility in the cloud service. Firstly, we add the concept of obligation and purpose into access control and establish the privacy information tree and privacy policy tree. Secondly, we establish a new trust evaluation and give the corresponding weight algorithm. Thirdly, we quantify the privacy information with the normal space and correlation coefficient method. Further, we propose a tradeoff relationship model between trust permission and privacy protection, each participant can select the corresponding parameters according to the actual requirement and personal preference. Experimental analysis and comparison results verify the feasibility, effectiveness, and superiority of our method. Finally, we summarize the work of this paper and point out the future development direction.

Privacy-Preserving Cloud Computing: Ecosystem, Life Cycle, Layered Architecture and Future Roadmap

“…3.4.1.1 Trustable Computing: The authors of [216] state that in Cloud Computing, privacy and trust create an inherent conflict. In order to evaluate the quantification of privacy and trust in a cloud system,in [217], the authors state that both must be weighted accordingly. A Reputationaware Trust and Privacy scheme proposed by [218] can deal with trust management by leveraging trust scores for cloud services.…”

Integrating a High-Reliability Multicriteria Trust Evaluation Model with Task Role-Based Access Control for Cloud Services

“…However, the authors did not focus on how to avoid all reputation attacks. In another study in 2021 [37] the author proposes a new trust model integrated with the access control model based on privacy and permission, which aims to protect user privacy and solve the privacy disclosure problem in cloud environment, but which is still defenseless against some attacks.…”