An Authentication Service System With Dynamic Trust Management In Cloud

In cloud computing mode, on-demand service is provided for users through the Internet. It is convenient for users accessing to the mode. At the same time, it also causes some potential security threats. And most of threats are caused by the end users of cloud. On one hand, when accessing to the cloud computing services the end users would concern about the security and privacy of the data they stored in the cloud. On the other hand, the illegal users who have bad purpose may steal users’ information to access to services of cloud computing illegally as legal users. Moreover, there are also legal cloud end users accessing the resources of cloud computing services in illegal ways. Therefore, how to ensure the data security of the legal end users and make the cloud computing service reliable has become one of the important researching subjects in cloud computing. How to accurately identify the cloud end users’ identity and ensure the security of users’ information is a key technical problem. An authentication service system which is based on PKI technology and combined dynamic trust management under cloud environment is designed.In order to satisfy the dynamic requirement of cloud environment, a trust evaluation model based on users’ behavior was proposed. This model can dynamically evaluate the end user’s trust degree according the interactive behavior data between the end users and cloud computing service application. The trust degree can reflect whether the behavior of end user’s is normal or not. And it can be used to monitor the users’ behavior to prevent malicious users’ illegal behavior. Experiments shows that the trust evaluation model based on users’ behavior data can respond to the user’s abnormal behavior, thereby for the strict access control by reducing its credit-degree.By integrating the identity authentication of PKI technology and dynamic trust management, the paper proposes an authentication service system and implements a prototype system which applied to the actual education cloud platform. The results show that the authentication service system can provide the identity authentication services and control access users in cloud services applications.