Attribute-based Access Control with Dynamic Trust in a Hybrid Cloud Computing Environment
Zhiyuan Zhao, Lei Sun · 2017
Cloud computing technology has become another revolution of information technology after the Internet due to their advantages of dynamic extensions, on-demand services, and charging by volume. The hybrid cloud, as a kind of the cloud computing, has broad application prospects, it is of great significance to information construction of our country. In order to improve scalability and to restrain cheating of resource sharing this paper proposed an attribute-based access control with dynamic trust (DT-ABAC) according to the characteristics of hybrid cloud computing environment. In the access control model, access request is described by the subject attribute, resource attribute, permission attribute, environmental and trust attributes, and access decision is based on the attribute information of the access request with the dynamic and fine-grained authorization mechanism, and the model has the better flexibility and scalability. At the same time, the model extends the trust attribute, and we research in some detail the related algorithms of the trust attribute to reach the aim of enhancing the scalability of resource sharing and preventing fraud. Finally, the simulation experiments show that the proposed model can achieve access control effectively and has better performance.