Designment And Realization Of Permission Management System Based On Cloud Storage

With the rapid development of cloud computing, various applications of cloud storage are found in every walk of life. This lead to that a large of cooperative works and information sharing need to be finished within the internet, and the number of users and resources are so huge, dynamic and varied. Therefore, an access control strategy which can adapt to the cloud storage environment is needed. The access control models already existed are designed for the static environment,but in cloud storage environment,the network’s scale is larger and dynamic,so the models are very difficult to adapt to this environment. If uses Role-Based Access Control (RBAC) model, when information system’s user number are becoming abnormal huge, the allocation and management of user’s role become complex and trival. Attribute-based access control is built in a distributed environment, and can be used to make up for this disadvantage. This paper combines two kinds of access control effectively, that is automatically generates user role according to properties of user, resource and environment, thus avoiding the complicated manual assignment. And this is the basis for the design and implementation of permission management system. The job is arranged as follows:Firstly, this paper introduces the access control technology and knowledge related to cloud storage, according to analyze the characteristics of all kinds of access control models and cloud storage. After comparing to traditional models, explains the advantages and disadvantages of RBAC and ABAC.Then, this paper uses a model which combines RBAC and ABAC, and describes the structure and the design of the model in detail. And according to the system requirements, simplifies this model.Finally, this paper designs strategy according to the system requirements, and implements a permission management system adapted to a cloud storage service on the basis of the strategy.