Scalable Multi-Tenant Authorization in Highly-Collaborative Cloud Applications

Gerges, Samy; Khattab, Sherif; Hassan, Hesham; Omara, Fatma A.

doi:10.11591/closer.v2i2.1665

Cited by 8 publications

(9 citation statements)

References 7 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…Gerges et al [10] proposed a scalable multi-tenant authorization system. This system replaces the role-to-object (RTO) mapping with role-to-role (RTR) mapping using the SplitMap role-mapping algorithm.…”

Section: Related Workmentioning

confidence: 99%

“…To solve this problem, the idea of role-mapping (i.e., role-to-role mapping) technique came out. It maps user roles in each organization to the roles in the host organization, which owns the shared resource [10].…”

Section: Role-to-role (Rtr) Mapping Modelmentioning

confidence: 99%

“…The online-memory scalability problem for a multi-tenant authorization service has been defined as the problem of minimizing the number of rule tuples that need to be online and searched for every authorization request [10]. The goal of the work in this paper is to enlarge the scale of the collaboration along two dimensions.…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Enhancing highly-collaborative access control system using a new role-mapping algorithm

Abdel-Fattah

Hassan

Omara

2022

IJECE

View full text Add to dashboard Cite

The collaboration among different organizations is considered one of the main benefits of moving applications and services to a cloud computing environment. Unfortunately, this collaboration raises many challenges such as the access of sensitive resources by unauthorized people. Usually, role based access-control (RBAC) Model is deployed in large organizations. The work in this paper is mainly considering the authorization scalability problem, which comes out due to the increase of shared resources and/or the number of collaborating organizations in the same cloud environment. Therefore, this paper proposes replacing the cross-domain RBAC rules with role-to-role (RTR) mapping rules among all organizations. The RTR mapping rules are generated using a newly proposed role-mapping algorithm. A comparative study has been performed to evaluate the performance of the proposed algorithm with concerning the rule-store size and the authorization response time. According to the results, it is found that the proposed algorithm achieves more saving in the number of stored role-mapping rules which minimizes the rule-store size and reduces the authorization response time. Additionally, the RTR model using the proposed algorithm has been implemented by applying a concurrent approach to achieve more saving in the authorization response time. Therefore, it would be suitable in highly-collaborative cloud environments

show abstract

Section: Related Workmentioning

confidence: 99%

Section: Role-to-role (Rtr) Mapping Modelmentioning

confidence: 99%

See 1 more Smart Citation

Enhancing highly-collaborative access control system using a new role-mapping algorithm

Abdel-Fattah

Hassan

Omara

2022

IJECE

View full text Add to dashboard Cite

show abstract

“…This approach lacks scalability and flexibility in terms of user set and domain levels; as the numeral of legal users becomes large, the solution will not be efficient and performance degrades. The data owners are required to be online all the time so as to encrypt or re-encrypt data and distribute Keys to authorize users [8]. In this paper we had Extended HASBE ("Hierarchical Attribute Set-Based Encryption") by proposing secure key distribution with improved domain hierarchy of user roles to access the files stored on cloud [9].…”

Section: Cipher Text Policy Attribute Based Encryption (Cp-abe)mentioning

confidence: 99%

HASBE access control model with Secure Key Distribution and Efficient Domain Hierarchy for cloud computing

Aluvalu

Kamliya

Muddana

2016

IJECE

View full text Add to dashboard Cite

Cloud computing refers to the application and service that run on a distributed system using virtualized resources and access by common internet protocol and networking standard. Cloud computing virtualizes system by pooling and sharing resources. System and resources can be monitored from central infrastructure as needed. It requires high security because now day’s companies are placing more essential and huge amount of data on cloud. Hence traditional access control models are not sufficient for cloud computing applications. So encryption based on Attribute (“ABE”-“Attribute based encryption”) has been offered for access control of subcontracted data in cloud computing with complex access control policies. Traditional HASBE provides Flexibility, scalability and fine-grained access control but does not support hierarchical domain structure. In this paper, we had enhanced “Hierarchical attribute-set-based encryption” (“HASBE”) access control with a hierarchical assembly of users, with flexible domain Hierarchy structure and Secure key distribution with predefined policy

show abstract

“…Because cloud computing providers cannot distribute servers to all enterprises, providers virtualize server clusters to distribute and rent computing resources to companies. This is named multi-tenancy technology [7,8,9,10]. The major obstacle to this technology is how to protect consumer privacy while they access data.…”

Section: Ming-huang Guo (Corresponding Author) Department Of Informatmentioning

confidence: 99%

An A-RBAC mechanism for a multi-tenancy cloud environment

Yang

Guo

2014

2014 4th International Conference on Wireless Communications, Vehicular Technology, Information Theory and Aerospace &Amp; Elec

View full text Add to dashboard Cite

With the evolution of software technology, companies require more highperformance hardware to enhance their competitiveness. Cloud computing is the result of distributed computing and grid computing processes and is gradually being seen as the solution to the companies. Cloud computing can virtualizes existing software and hardware to reduce costs. Thus, companies only require high Internet bandwidth and devices to access cloud service on the Internet. This would decrease many overhead costs and the number of IT staff required. When many companies rent a cloud service simultaneously, this is called a multitenancy cloud service. However, how to access resource safely is important if adopt multi-tenancy cloud computing technology. The cloud computing environment is vulnerable to network-related attacks. This research improves the role-based access control authorization mechanism and combines it with attribute check mechanism to determine which tenant that user can access. The enhanced authorization can improve the safety of cloud computing services and protected the data privacy.

show abstract

Scalable Multi-Tenant Authorization in Highly-Collaborative Cloud Applications

Cited by 8 publications

References 7 publications

Enhancing highly-collaborative access control system using a new role-mapping algorithm

Enhancing highly-collaborative access control system using a new role-mapping algorithm

HASBE access control model with Secure Key Distribution and Efficient Domain Hierarchy for cloud computing

An A-RBAC mechanism for a multi-tenancy cloud environment

Contact Info

Product

Resources

About