Data Security and access management in Cloud Computing: capability list-based cryptography
Résumé
A new paradigm in information technology has emerged this last years and continues to grow. Cloud computing is quite a new concept that has potential advantages; computing capacity provided as needed, much lower cost than in-house infrastructure, better reliability depending on the S ervice Level Agreement (S LA)… However, some drawbacks, mainly data security and access control concerns, remain a real setback to a wider utilization of this technology. In fact, storing sensitive data in a remote server owned by an external entity (the cloud provider) could lead to substantial risks. A malicious user or operator can identify and exploit the vulnerabilities of this system. Numerous works are being done in order to reinforce the cloud capacities in term of protecting data and managing access control using cryptography, data fragmentation, access control policies... In this paper, we introduce a new approach in which we exclude the cloud provider from any involvement in the access management with the aim of minimizing the leaks. We developed and tested programs based on a capability-list and using both symmetric and asymmetric cryptography
Origine | Fichiers éditeurs autorisés sur une archive ouverte |
---|