Role and attribute based access control model for web service composition in cloud environment

Geetha, N.; Anbarasi, M. S.

doi:10.1109/iccids.2017.8272642

Cited by 3 publications

(1 citation statement)

References 8 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…The proposed method effectively overcome the shortcomings of traditional ABAC and ABAC, and achieve the advantages of context-aware, fine-grained, etc. For the SaaS model of cloud computing, Geetha et al [22] proposed a role-based and attribute-based Web service access control mechanism to ensure the security of the service composition by ranking the possible chains of services based on user's role and sensitivity of related data. YU et al [23] combined attribute encryption algorithm with FAHP-based user trust evaluation methods, and proposed an attribute and user trust based RBAC to implement the fine-grained dynamic authorization of access control.…”

Section: Related Workmentioning

confidence: 99%

A Data Security Enhanced Access Control Mechanism in Mobile Edge Computing

et al. 2020

View full text Add to dashboard Cite

Mobile edge computing, with characteristics of position awareness, mobile support, low latency, decentralization, and distribution, has received widespread attention from industry and academia, and has been applied to application areas such as intelligent transportation, smart city, and real-time big data analysis. However, it also brings the new security threats, especially data security threats during data access that leads to unauthorized/unauthorized access, alteration and disclosure of data, affecting the confidentiality and integrity of the data. Therefore, access control, as an important method to ensure the security of user data during data access, began to be applied to mobile edge computing. However, the existing access control has the disadvantages of coarse-grain, poor flexibility and accuracy, lack of internal attack considerations, etc., which cannot meet the needs of data security in practical applications of mobile edge computing. In this paper, a data security enhanced Fine-Grained Access Control mechanism (FGAC) is proposed to ensure data security during data access in mobile edge computing. In FGAC, a dynamic fine-grained trusted user grouping scheme based on attributes and metagraphs theory was first designed. Secondly, the scheme was combined with the traditional role-based access control mechanism to assign roles to users based on user group credibility. And then, based on attribute matching the user authentication further verifies whether the user is allowed to perform the access operations to achieve fine-grained data protection. Experimental results show that FGAC can effectively identify malicious users and make group adjustments, while achieving finegrained access control and assure the data security during the data access process in mobile edge computing.

show abstract

Section: Related Workmentioning

confidence: 99%