Cloud Storage Access Control System Based On Attribute

With the continuous development of cloud computing technology, the securityissues in cloud computing environment get worse. The security of user data whichstored in cloud need to be enhanced. Therefore provide a safe, dynamic, fine-grained,scalable attribute-based access control is very important to the user’s privacy. This isthe main content of this paper.This paper presents a Cloud Storage attribute-based access control system whichis suitable for the cloud computing environment. By combining XACML (eXtensibleAccess Control Markup Language) framework and attribute-based encryptionmechanism makes the access control system to provide a more flexible and secureaccess control.This paper analyzes the design concept and overall structure of cloud storageaccess control system based on attributes. And achieved its prototype system onOpenStack cloud platform. The prototype system mainly includes policy generationand evaluation subsystem and security cloud storage subsystem. This paper details thedesign and implementation of policy generation And evaluation subsystem and itsmain modules, which include keystone token extraction and verification module、strategies evaluation module and policy generation module. Finally, this paper test andanalyze the system in function by the client of C/S structure of and web form of B/Sstructure.