Fine-grained access control for cloud computing. (1st January 2013)

• Record Type: Journal Article
• Authors: Ye, Xinfeng; Khoussainov, Bakh
• Is Part Of: International journal of grid and utility computing. Volume 4:Number 2/3(2013)
• Page Start: 160
• Page End: 168
• Publication Date: 2013-01-01
• Subjects: access control -- cloud computing -- cryptography -- hidden policy -- hidden credential -- cloud manufacturing; Electronic data processing -- Distributed processing -- Periodicals; Electronic commerce -- Management -- Computer programs -- Periodicals; 004.605
• Languages: English
• ISSNs: 1741-847X

Abstract

Fine-grained access control schemes are commonly used in cloud computing. In this type of schemes, each data item is given its own access control policy. The entity that wants to access the data item needs to provide its credentials to a policy enforcer. In a cloud environment, normally, the policy enforcer is not the owner of the data. The access control policies and the credentials might reveal some information that the policy enforcer is not entitled to know. This paper proposes a fine-grained access control scheme. It prevents the policy enforcers from comprehending the access control policies and the entities' credentials by using cryptographic techniques. Compared with the existing schemes, the proposed scheme provides higher level privacy.