A Dynamic Cross Domain Access Control Model for Multi-level System

Author(s):  
Peisheng Han ◽  
Li Guo ◽  
Luyao Liu
2021 ◽  
Vol 18 (2) ◽  
pp. 110-135
Author(s):  
Xiang Yu ◽  
Zhangxiang Shu ◽  
Qiang Li ◽  
Jun Huang

2020 ◽  
Vol 30 (11n12) ◽  
pp. 1851-1865
Author(s):  
Yunpeng Zhang ◽  
Xin Liu

The distributed multiple autonomous network has become the main trend of modern information systems, such as Cloud, Service-Oriented Architecture (SOA) and Internet of Things (IoT). Access control in such a heterogeneous and dynamic system has become a major information security challenge, which hinders the sharing of resources and information. In this work, we present an Attribute-Based Access Control (ABAC) model for cross-domain access control. The proposed access control model comprises a boundary control server designed to provide cross-domain access control capability. An eXtensible Access Control Markup Language (XACML) policy model-based implementation is introduced. Process and implementation show the proposed model alleviates the security risk on the domain boundary during the cross-domain access control process.


Author(s):  
Sarra Namane ◽  
Nassira Ghoualmi

Despite the various attractive features that grid computing has to offer, it has many great security challenges, such as access control. With the expansion of the network scale, a large number of authorization requests have to be treated; on the other hand, the multi-domain nature of grid computing generates difficult to manage questions about cross-domain access control, and a variety of solutions use the role mapping mechanism to allow collaborations between domains. But this mechanism gives a potential risk of violating consistency properties of domains. This article aims to address this issue and proposes a parallel access control model in cross-domain grid computing architecture to be more convenient to the security requirements of the multi-domain environment. Finally, as a proof of concept, the authors implement a cross-domain and parallel authorization simulator (CD-PAS) where experiments are done. The obtained results show that the proposed model is sensitive to the number of authorization requests. In addition, it can effectively reduce the execution time of access control mechanism.


2021 ◽  
Author(s):  
Hua Zhang ◽  
Hao Wang ◽  
Dong Liu ◽  
Chunru Zhou ◽  
Fang Lou

Sign in / Sign up

Export Citation Format

Share Document