Cloud security access control model

Abstract

The invention discloses a cloud security access control model. The model is characterized in that: aiming at the multi-tenant architecture characteristic of cloud computing, by combining a role-based access control (RBAC) model, a tenant concept and a cloud service provider concept are introduced to an access control model, and a uniform tenant access control model and a user access control model are formed by defining model elements and formally describing model functions. The cloud security access control model can adapt to the characteristic of multi-tenant of the cloud computing, improves the flexibility of user authority management in a cloud computing environment, can reduce the complexity of authorization management and management overhead, and can effectively ensure the security and integrity of user data in the cloud computing environment.

Description

technical field [0001] The present invention relates to the field of computer information security, specifically a role-based access control model RBAC, aiming at the multi-tenant architecture characteristics of cloud computing, introducing the concept of tenant and cloud service provider into the access control model, through the model The definition of elements and the formal description of model functions constitute a unified tenant access control model and user access control model. Background technique [0002] Cloud computing is one of the hot topics in the current information technology field, and it is the focus of great attention from all walks of life, such as industry, academia, and government. With its advantages of convenience, economy and high scalability, cloud computing has attracted the attention of more and more enterprises, freeing them from the heavy pressure of IT infrastructure management and maintenance, and focusing more on their core business develop...

AI Technical Summary

Problems solved by technology

According to Gartner's 2009 survey, more than 70% of the CTOs of the interviewed companies believe that the primary reason for not adopting cloud computing in the near future is the concern about data security and privacy

Recently, Amazon, Google and other cloud computing providers continue to break out various security incidents, which have exacerbated people's concerns.

For example, in March 2009, a large number of user files were leaked by Google; in February and July 2009, Amazon's simple storage service S3 was interrupted twice, resulting in the paralysis of websites that depended on the network's single storage service, etc.

Images