scholarly journals Index Generation and Secure Multi-user Access Control over an Encrypted Cloud Data

2016 ◽  
Vol 89 ◽  
pp. 293-300 ◽  
Author(s):  
S. Raghavendra ◽  
K. Meghana ◽  
P.A. Doddabasappa ◽  
C.M. Geeta ◽  
Rajkumar Buyya ◽  
...  
Keyword(s):  
Access Control ◽  
Cloud Data ◽  
User Access

scholarly journals QShield: Protecting Outsourced Cloud Data Queries With Multi-User Access Control Based on SGX

2021 ◽  
Vol 32 (2) ◽  
pp. 485-499
Author(s):  
Yaxing Chen ◽  
Qinghua Zheng ◽  
Zheng Yan ◽  
Dan Liu
Keyword(s):  
Access Control ◽  
Cloud Data ◽  
User Access

Reliable Policy Updating under Efficient Policy Hidden Fine-grained Access Control Framework for Cloud Data Sharing

2021 ◽  
pp. 1-1
Author(s):  
Zuobin Ying ◽  
Wenjie Jiang ◽  
Ximeng Liu ◽  
Shengmin Xu ◽  
Robert Deng
Keyword(s):  
Access Control ◽  
Data Sharing ◽  
Cloud Data ◽  
Fine Grained ◽  
Control Framework

scholarly journals Evaluating the Performance of Novel JWT Revocation Strategy

2021 ◽  
Author(s):  
László Viktor Jánoky ◽  
Péter Ekler ◽  
János Levendovszky
Keyword(s):  
Access Control ◽  
Real World ◽  
Mathematical Framework ◽  
Web Based ◽  
Novel Approach ◽  
User Access ◽  
Digital Signing

JSON Web Tokens (JWT) provide a scalable, distributed way of user access control for modern web-based systems. The main advantage of the scheme is that the tokens are valid by themselves – through the use of digital signing – also imply its greatest weakness. Once issued, there is no trivial way to revoke a JWT token. In our work, we present a novel approach for this revocation problem, overcoming some of the problems of currently used solutions. To compare our solution to the established solutions, we also introduce the mathematical framework of comparison, which we ultimately test using real-world measurements.

Access Control and Information Flow Control for Web Services Security

2016 ◽  
Vol 11 (1) ◽  
pp. 44-76 ◽  
Author(s):  
Saadia Kedjar ◽  
Abdelkamel Tari ◽  
Peter Bertok
Keyword(s):  
Web Services ◽  
Access Control ◽  
Flow Control ◽  
Information Flow ◽  
Information Flow Control ◽  
User Access ◽  
Web Services Security ◽  
Information Confidentiality ◽  
Security Standards

With the advancement of web services technology, security has become an increasingly important issue. Various security standards have been developed to secure web services at the transport and message level, but application level has received less attention. The security solutions at the application level focus on access control which cannot alone ensure the confidentiality and integrity of information. The solution proposed in this paper consists on a hybrid model that combines access control (AC) and information flow control (IFC). The AC mechanism uses the concept of roles and attributes to control user access to web services' methods. The IFC mechanism uses labels to control how the roles access to the system's objects and verify the information flows between them to ensure the information confidentiality and integrity. This manuscript describes the model, gives the demonstration of the IFC model safety, presents the modeling and implementation of the model and a case study.

Sign in / Sign up

Export Citation Format

Share Document