A UCONABC} resilient authorization evaluation for cloud computing

作者：Marcon Arlindo Luis; Santin Altair Olivo; Stihler Maicon; Bachtold Juliana

来源：IEEE Transactions on Parallel and Distributed Systems, 2014, 25(2).

DOI：10.1109/TPDS.2013.113

• Application scenario
• Cloud environments
• Distributed systems
• Proof of concept
• Security and privacy protection
• User services

The business-driven access control used in cloud computing is not well suited for tracking fine-grained user service consumption. UCONABC applies continuous authorization reevaluation, which requires usage accounting that enables fine-grained access control for cloud computing. However, it was not designed to work in distributed and dynamic authorization environments like those present in cloud computing. During a continuous (periodical) reevaluation, an authorization exception condition, disparity among usage accounting and authorization attributes may occur. This proposal aims to provide resilience to the UCONABC continuous authorization reevaluation, by dealing with individual exception conditions while maintaining a suitable access control in the cloud environment. The experiments made with a proof-of-concept prototype show a set of measurements for an application scenario (e-commerce) and allows for the identification of exception conditions in the authorization reevaluation.