Research And Practice Of Access Control Of Web Based On Cloud Storage

The rapid development of cloud computing has greatly accelerated the development of cloud storage, and cloud storage has big advantages in slowing down the excessively rapid growth of storage space, reducing the space of data, cutting down the cost of the software and hardware. Meanwhile, accompanied by the development of mobile Internet, network bandwidth and web technology, centralized data storage and remote access based on cloud storage have become a typical application model of cloud computing.With the rapid development of cloud storage, the security problem of cloud storage has become the focus of users and the industry. On the one hand, it is because of the lack of trust mechanism between users and the cloud storage service vendors; On the other hand, it is due to the risks of the illegal access to cloud storage, destruction of the data, information leakage, reducing the user’s trust in the security of cloud storage. Based on the above, the article proposes a scheme consist of key technologies of OBAC model, object ACLs, signature URL, and etc. On the basis of safety standards of Web code. The paper mainly completed the following work:1. The research of features of data storage in cloud storage. Cloud storage is different from traditional block storage, file storage, which uses the type of object storage, and cloud storage data. Not only does it better in Key-Value characteristic, but also other characters of object inheritance and priority are reflected.2. Access control of scheme of the data in Cloud storage based on OBAC model was proposed and designed by comparing access control model of DAC, MAC, RBAC, ABAC based on the mechanism of ABE, designed the access control scheme of data in cloud storage based on OBAC model, which improved the access control granularity and flexibility of data in cloud storage.3. Design and build the prototype system of access control in cloud storage. The scheme of access control of cloud storage data based on the above, using the technology of cloud object ACLs, signature URL and prevent cross-site scripting attack(XSS), and etc.Design and build a prototype access control system of Web based on cloud storage.4. Safe test and analysis of XSS of the prototype system of access control in cloud storage.In this paper, the access control scheme of data in cloud storage can realize fine-grained access control of data record level and data security of the process of Web access, providing a solution in secure Web access of data access in cloud storage.