WiP: A Novel Blockchain-Based Trust Model for Cloud Identity Management

Abstract

Secure and reliable management of identities has become one of the greatest challenges facing cloud computing today, mainly due to the huge number of new cloud-based applications generated by this model, which means more user accounts, passwords, and personal information to provision, monitor, and secure. Currently, identity federation is the most useful solution to overcome the aforementioned issues and simplify the user experience by allowing efficient authentication mechanisms and use of identity information from data distributed across multiple domains. However, this approach creates considerable complexity in managing trust relationships for both the cloud service providers and their clients. Poor management of trust in federated identity management systems brings with it many security, privacy and interoperability issues, which contributes to the reluctance of organizations to move their critical identity data to the cloud. In this paper, we aim to address these issues by introducing a novel trust and identity management model based on the Blockchain for cloud identity management with security and privacy improvements

Blockchain Based Cloud Computing: Architecture and Research Challenges

“…There are a block header and a block body in each block. As shown in figure 2, there are six main components in the block header [24]. They are: 1.…”

“…In this PoW protocol, the longer the chain is, it would be considered an authenticate one. In PoW, miners have to use a lot of computation power to do many computer calculations [24]. This process wastes too much of its resources.…”

Identity-as-a-Service: An Adaptive Security Infrastructure and Privacy-Preserving User Identity for the Cloud Environment

“…On the other hand, in the past 10 years, many efforts have been taken in protecting PII [19][20][21][22][23][24][25][26][27][28][29]. These approaches target certain issues but still have limitations.…”

“…This approach involves the user granting permissions for each SP explicitly. On the other hand, anonymity approaches [20][21][22][23][24], aggregated Zero Knowledge Proofs [25][26][27], and group signatures [28,29] preserve complete anonymity for the user in a transaction with an SP. They require users to interact with an SP over the front-end.…”

“…However, the execution of a mobile agent's plaintext code in an untrusted host is not secure [54]. Recent work also took advantage of Blockchain technology to store data (e.g., an authentication claim [23], or an access control list [24]) in a Blockchain network. However, PII is stored in an external database.…”