¹ School of Computer Science and Technology, China University of Mining and Technology, Xuzhou, China
² State Key Laboratory for Novel Software Technology, Nanjing University, Nanjing, Chin
³ Information Security Center, Beijing University of Posts and Telecommunications, Beijing, China; National Engineering Laboratory for Disaster Backup and Recovery, Beijing University of Posts and Telecommunications, Beijing, China

---

Abstract—Cloud computing is a new paradigm which enables users to reduce their costs and is advantageous to both the serving and served organizations. However, security issue is a major concern in the adoption of cloud computing. The most effective way of protecting cloud computing services, resources and users is access control. This paper intends to provide a trust-based access control mechanism for cloud computing considering its multi-domain aspects. Firstly, trust is introduced into cloud computing environment and trust relationships between users and cloud platform are built. It also analyzes the difference between intra-domain trust and inter-domain trust. Furthermore, a role-based access control framework combined with trust degree in multi-domain is given from this paper. Access control in local domain directly applies RBAC model combined with trust degree, whereas in multi-domain it contains the conception of role translation. The simulation results show that the proposed method is more suitable to cloud environment and definitely can improve the reliability and validity of the system.

Index Terms—cloud computing, trust, access control, multi-domain, role translation

[PDF]

Cite: Guoyuan Lin, Yuyu Bie, and Min Lei, " Trust Based Access Control Policy in Multi-domain of Cloud Computing," Journal of Computers vol. 8, no. 5, pp. 1357-1365, 2013.