Protected outsourced data in cloud computing : novel politic of security based on capability list
Résumé
Cloud computing is a new concept that was developed quite a lot these recent years. The number of organizations and companies adopting the cloud solutions is increasing because of many advantages found in its use (cut in setup and operating costs, scalability, flexibility….). However, this new paradigm faces some concerns that slow down its evolution and cause less infatuation from the users. The main issue here is undoubtedly the lack of security and mainly how outsourced sensible data within a cloud server can be protected? A number of solutions are being examined in order to strengthen the used models (authentication, data encryption and fragmentation before storing, Identity Access Management…), Data owners, users and Cloud Service providers are often involved. In this paper, we propose a new approach in which the provider does not participate on any level in the access management, only the owner can setup, update and verify access rights with the aim of minimizing leak risks.
Domaines
Informatique [cs]Origine | Fichiers éditeurs autorisés sur une archive ouverte |
---|