Fine-Grained Access Control System for Multi-User Environments
Kai Cao, Zhe Wang · 2024
With the increasing adoption of cloud computing, data owners often outsource IoT-generated data to cloud servers, especially in multi-user scenarios where scalability is crucial. However, semi-trusted cloud servers may infer sensitive information from these data transfers, and collusion between malicious users and cloud servers could lead to unauthorized access to other users’ data, raising significant privacy concerns. Without ensuring data isolation and enforcing effective permissions management, multi-user environments face risks of data leakage and unauthorized access. To address these challenges, robust access control mechanisms are essential. While traditional methods, such as Role-Based Access Control (RBAC) and Access Control Lists (ACL), are straightforward to implement, they lack scalability and flexibility, making them unsuitable for dynamic, multi-user scenarios. In contrast, Attribute-Based Access Control (ABAC) provides flexible and fine-grained access management, well-suited to such environments. We propose a Fine-Grained Access Control (FGAC) system based on ABAC to ensure efficient and adaptable access management in multi-user cloud environments, incorporating attribute-based encryption to enhance data security in untrusted cloud infrastructures.