Research On UCON Access Control Model Under Cloud Computing Based On Zero Trust

With the increasing penetration of cloud computing technology around the world,across a range of industries and functional areas,medical and health institutions also on the road to the cloud.The value of big data behind medical are fully reflected in cloud computing environment.Auxiliary services such as medical treatment,health management greatly raised the standard of diagnosis and treatment level and daily health care of us,but at the same time,medical data in cloud is facing like cyber attacks,artificial leak and other security issues.These medical information often contain the patient's privacy and medical records,caused great hidden trouble,also pose a threat to public information security.In addition,phishing attacks and social engineering attacks will be carried out through the obtained personal information,which will further increase the intensity and scope of attacks.Therefore,the problem of data security in cloud computing environment needs to be solved urgently.In this paper,the access control model is deeply studied in the cloud computing environment,and the main work includes the following three points: 1.The ZT-UCON access control model of cloud computing based on zero trust is built with the zero-trust idea,and the trust evaluation module is introduced to support the dynamic evaluation of trust values,so as to support the dynamic and fine-grained access control in cloud computing environment.2.A dynamic evaluation method of trust value based on sliding window for ZT-UCON is presented,and the dynamic adjustment process of trust value is described in detail,so as to meet the requirements of fine-grained access control.By analyzing the time complexity and space complexity of the trust evaluation model,the performance of the trust evaluation model and ZT-UCON model is evaluated,and the good applicability of the model is verified.Combined with the fuzzy theory,the dynamic evaluation method of trust value based on sliding windows for ZT-UCON is presented.Various factors affecting trust value are comprehensively analyzed,and the dynamic adjustment process of trust value is described in detail,so as to meet the needs of fine-grained access control.The performance of the trust evaluation model and the ZT-UCON model was evaluated through three sets of comparative simulation experiments,including the influence of setting the sliding window interval of recent access history on the trust value evaluation,the computing and time complexity of the trust evaluation model,and the dynamic analysis of the access control model,which verified the good applicability of the model.3.Through the analysis of the practical application of medical cloud computing environment security requirements,gives a security cloud platform system structure diagram of the medical system based on ZT-UCON,and with the help of actual medical data in shared access case are described in detail based on access control process of ZT-UCON,helping with future health care industry more standardized,the safety of data sharing.