Research On Attribute-based Access Control Model In Cloud Computing

With the increasing popularity of cloud computing services, the research of cloud computing also increasing gradually, but it also reveals more security risk of cloud computing. In this paper, A C-ABAC model is proposed for cross-system cloud computing. The model involves both characteristics of cloud services and the idea of Next Generation Access Control (NGAC).The C-ABAC model introduces Virtual Objects, Policy Store& Administration Point and Cross System Point. In this paper C-ABAC model is formally defined. The attributes of C-ABAC is defined according to classification. A few concepts including attribute, Attribute Hierarchy, context, reputation, collaboration level are introduced. The new concepts increase both the complexity and diversity of the C-ABAC model.The self-management of attribute includes creating attribute, attribute upload, attribute update, attribute delete. The attribute migration of C-ABAC according to the collaboration level and double attribute authority solve consistency problem during cross system access.Then, C-ABAC model uses error-free model checking techniques for the verification of security properties in attribute migration. Two mechanism of reputation evaluation mechanism realize safety inter-operation of the C-ABAC model in cross system access.At Last, we apply C-ABAC model for health management cloud service and realize it with XACML 3.0. Then we compare the time for PDP with and without reputation.