Achieving fine-grained access control and mitigating role explosion by utilising ABE with RBAC. (2017)

• Record Type: Journal Article
• Authors: Balusamy, Balamurugan; Ramachandran, Siddharth; Priya, Nalini
• Is Part Of: International journal of high performance computing and networking. Volume 10:Number 1/2(2017)
• Page Start: 109
• Page End: 117
• Publication Date: 2017
• Subjects: cloud computing -- cloud security -- RBAC -- role-based access control -- fine-grained access control -- role explosion -- ABE -- attribute-based encryption -- cryptography; High performance computing -- Periodicals; Computer networks -- Periodicals; High performance computing; Periodicals; 004.05
• Languages: English
• ISSNs: 1740-0562

Abstract

Cloud systems can store a vast amount of sensitive data whose access must be well regulated. A good access control policy ensures the security of this data while providing high flexibility in terms of access management. In this paper, we introduce access control architecture to mitigate the issue of role-explosion in RBAC and achieve a high degree of fine-grained access control by following an attribute-based encryption scheme with RBAC. In our model, we propose a user-tree with a hierarchical structure composed of groups and sub-groups to which a user will be assigned. These sub-groups will have their own sets of attributes as well as common inherited attributes. A user assigned to a specific sub-group will receive a key with the specific attributes of the sub-group as well as the inherited attributes.