检索结果-内蒙古大学图书馆

AADEC: Anonymous and Auditable distributed access control for Edge Computing Services

IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY 2023年 18卷 290-303页

作者： Zhou, Xiaotong He, Debiao Ning, Jianting Luo, Min Huang, Xinyi Wuhan Univ Sch Cyber Sci & Engn Wuhan 430072 Peoples R China Guilin Univ Elect Technol Guangxi Key Lab Trusted Software Guilin 541004 Peoples R China Shanghai Key Lab Privacy Preserving Computat Matrix Elements Technol Shanghai 201204 Peoples R China Fujian Normal Univ Coll Comp & Cyber Secur Fujian Prov Key Lab Network Secur & Cryptol Fuzhou 350117 Peoples R China Chinese Acad Sci Inst Informat Engn State Key Lab Informat Secur Beijing 100093 Peoples R China Qilu Univ Technol Shandong Acad Sci Shandong Prov Key Lab Comp Networks Jinan 250014 Peoples R China Hong Kong Univ Sci & Technol Guangzhou Artificial Intelligence Thrust Informat Hub Guangzhou 511455 Peoples R China

Edge computing is an emerging distributed computing concept that allows edge servers to provide authorized consumers with various on-demand services. Due to highly dynamic and untrustworthy network environments, various potential security concerns (e.g., unauthorized access, data manipulation, and privacy leakage) have been the critical factors restricting the development of edge computing. A recent heterogeneous framework proposed by Dougherty et al. (CCS'21), named APECS, deploys token-based authorization and multiple attribute-based encryption (MABE) to guarantee access control and data confidentiality. While APECS achieves a secure asynchronous access control without the "always-on " cloud, it suffers from privacy leakage (caused by the public identity information) and fake data spreading issues (due to the data confidentiality). In this paper, we propose an Anonymous and Auditable distributed access control Framework for Edge Computing (AADEC) to relieve these issues. AADEC is based on two building blocks that we designed, namely a conditional anonymous authentication and an auditable MABE with optimized performance. We also define the formal security models and present security proofs for our proposal. The final qualitative comparison and performance benchmark demonstrate that AADEC can achieve a trade-off among anonymity, confidentiality, auditability and efficiency.

关键词： distributed access control signatures of knowledge edge computing

来源：评论

学校读者我要写书评

暂无评论

APECS: A distributed access control Framework for Pervasive Edge Computing Services 21

APECS: A Distributed Access Control Framework for Pervasive ...

引用

ACM SIGSAC Conference on Computer and Communications Security (ACM CCS)

作者： Dougherty, Sean Tourani, Reza Panwar, Gaurav Vishwanathan, Roopa Misra, Satyajayant Srikanteswara, Srikathyayani St Louis Univ St Louis MO 63103 USA New Mexico State Univ Las Cruces NM 88003 USA Intel Labs Portland OR USA

ISBN: (纸本)9781450384544

Edge Computing is a new computing paradigm where applications operate at the network edge, providing low-latency services with augmented user and data privacy. A desirable goal for edge computing is pervasiveness, that is, enabling any capable and authorized entity at the edge to provide desired edge services-pervasive edge computing (PEC). However, efficient access control of users receiving services and edge servers handling user data, without sacrificing performance is a challenge. Current solutions, based on "always-on" authentication servers in the cloud, negate the latency benefits of services at the edge and also do not preserve user and data privacy. In this paper, we present APECS, an advanced access control framework for PEC, which allows legitimate users to utilize any available edge services without need for communication beyond the network edge. The APECS framework leverages multi-authority attribute-based encryption to create a federated authority, which delegates the authentication and authorization tasks to semi-trusted edge servers, thus eliminating the need for an "always-on" authentication server in the cloud. Additionally, APECS prevents access to encrypted content by unauthorized edge servers. We analyze and prove the security of APECS in the Universal Composability framework and provide experimental results on the GENI testbed to demonstrate the scalability and effectiveness of APECS.

关键词： distributed access control authentication authorization attribute-based encryption edge computing

来源：评论

学校读者我要写书评

暂无评论

MA-MOrBAC: A distributed access control Model Based on Mobile Agent for Multi-organizational, Collaborative and Heterogeneous Systems 12th

MA-MOrBAC: A Distributed Access Control Model Based on Mobil...

引用

12th International Conference on Risks and Security of Internet and Systems (CRISIS)

作者： Ben Yahya, Zeineb Ktata, Farah Barika Ghedira, Khaled Univ Manouba COSMOS Natl Sch Comp Sci Tunisia ENSI Manouba Tunisia Univ Sousse COSMOS Higher Inst Appl Sci & Technol Sousse ISSATSO Sousse Tunisia Natl Agcy Promot Sci Res Tunisia COSMOS Tunis Tunisia

ISBN: (纸本)9783319766874;9783319766867

Facing the current evolution of networks infrastructure and the expansion of the information system in organizations and businesses, protecting data and resources against unauthorized access and unauthorized disclosure, is an important requirement of any information management system. In this context, diverse security issues are amplified. Particularly, access control seems of main importance because it ensures diverse security services, such as, authentication, identification, confidentiality and integrity. Several works are devoted for designing access control models. In this paper, we work to improve Multi-OrBAC model by introducing a new distributed access control model based on Mobile Agent.

关键词： Security distributed access control Multi-OrBAC model Mobile agent

来源：评论

学校读者我要写书评

暂无评论

distributed access control with adaptive privacy preserving property for wireless sensor networks

引用

SECURITY AND COMMUNICATION NETWORKS 2014年第4期7卷 759-773页

作者： Ma, Changsha Xue, Kaiping Hong, Peilin Univ Sci & Technol China EEIS Dept Informat Network Lab Hefei 230027 Peoples R China

access control plays an important role in protecting security-sensitive sensor data from being utilized by malicious users. Despite the numerous studies on access control for wireless sensor networks (WSNs), however, few of them pay attention to preserving user privacy, which has recently been an urgent demand of the network users. In this paper, we propose two access control schemes with different privacy preserving properties for WSNs, which can adaptively satisfy the demands of the sensor network users. First, on the basis of our signcryption approach, we propose a distributed query protected access control scheme where the query message is encrypted in the process of user authentication. Because no other users could decrypt and read the query message, the user can preserve the privacy of the target data type. With the additional help with proxy signature, we then design a distributed anonymous access control scheme. Apart from protecting the data type information, distributed anonymous access control preserves the privacy of the user's access behavior by anonymizing the user's identity. In contrast to the previous privacy-preserved access control schemes for WSNs, our schemes can efficiently protect the privacy of users without significantly increasing the network overhead and the energy consumption on sensors. Copyright (c) 2013 John Wiley & Sons, Ltd.

关键词： distributed access control privacy signcryption proxy signature wireless sensor networks

来源：评论

学校读者我要写书评

暂无评论

distributed attribute-based access control system using permissioned blockchain

引用

WORLD WIDE WEB-INTERNET AND WEB INFORMATION SYSTEMS 2021年第5期24卷 1617-1644页

作者： Rouhani, Sara Belchior, Rafael Cruz, Rui S. Deters, Ralph Univ Saskatchewan Dept Comp Sci Saskatoon SK S7N 5C9 Canada Univ Lisbon Inst Super Tecn Dept Comp Sci & Engn Lisbon Portugal

Auditing provides essential security control in computer systems by keeping track of all access attempts, including both legitimate and illegal access attempts. This phase can be useful in the context of audits, where eventual misbehaving parties can be held accountable. Blockchain technology can provide the trusted auditability required for access control systems. In this paper, we propose a distributed Attribute-Based access control (ABAC) system based on blockchain to provide trusted auditing of access attempts. Besides auditability, our system presents a level of transparency that both access requesters and resource owners can benefit from it. We present a system architecture with an implementation based on Hyperledger Fabric, achieving high efficiency and low computational overhead. The proposed solution is validated through a use case of independent digital libraries. Detailed performance analysis of our implementation is presented, taking into account different consensus mechanisms and databases. The experimental evaluation shows that our presented system can effectively handle a transaction throughput of 270 transactions per second, with an average latency of 0.54 seconds per transaction.

关键词： distributed access control Attribute-based access control Blockchain Hyperledger fabric Performance

来源：评论

学校读者我要写书评

暂无评论

A semantic-based access control mechanism for distributed systems 21

A semantic-based access control mechanism for distributed sy...

引用

36th Annual ACM Symposium on Applied Computing (SAC)

作者： Sadeghi, Mersedeh Sartor, Luca Rossi, Matteo Politecn Milan Dipartimento Elett Informaz & Bioingn Milan Italy Politecn Milan Dipartimento Meccan Milan Italy

ISBN: (纸本)9781450381048

access control management in a collaborative environment composed of a multitude of distributed autonomous organizations is a challenging task. To answer the challenge, in this paper we propose a novel approach that incorporates semantic technologies in the Attribute-Based access control (ABAC) approach. Building on the basic principles of ABAC, our approach allows for a highly expressive modeling of the context in which access decisions are made, by providing mechanisms to describe rich relationships among entities, which can evolve over time. In addition, our system works in a truly decentralized manner, which makes it suitable for geographically distributed enterprise systems. We show the feasibility in practice of our approach through some experimental results.

关键词： Semantic-Based access control Attribute-Based access control distributed access control distributed Reasoning Context-aware access control

来源：评论

学校读者我要写书评

暂无评论

Workflow Model for distributed access control

Workflow Model for Distributed Access Control

引用

3rd International Conference on Advances in Computing and Communications (ICACC)

作者： Thomas, Manoj V. Sekaran, K. Chandra Natl Inst Technol Dept Comp Sci & Engn Surathkal 575025 Karnataka India

ISBN: (纸本)9780769550336

In the distributed computing environments like cloud computing or service computing, users access various services and shared resources hosted by the service providers, to achieve their tasks done efficiently. Authentication and authorization are the two important functions to be performed in this context, to make sure that unauthorized users do not access the distributed system components. In this paper, we analyse the various distributed access control approaches already adopted in this area, considering the advantages and the disadvantages. We propose a distributed access control architecture for the cloud computing paradigm considering the present day requirements of the service consumers and service providers. We also give the workflow model for the proposed distributed access control system in the cloud. A few open issues in the area of distributed access control are also discussed.

关键词： Authentication Authorization Cloud Computing distributed access control Identity Provider Service Computing Trust

来源：评论

学校读者我要写书评

暂无评论

A distributed access control Architecture for Cloud Computing

引用

IEEE SOFTWARE 2012年第2期29卷 36-44页

作者： Almutairi, Abdulrahman A. Sarfraz, Muhammad I. Basalamah, Saleh Aref, Walid G. Ghafoor, Arif Purdue Univ Sch Elect & Comp Engn W Lafayette IN 47907 USA Umm Al Qura Univ Mecca Saudi Arabia

The large-scale, dynamic, and heterogeneous nature of cloud computing poses numerous security challenges. But the cloud\'s main challenge is to provide a robust authorization mechanism that incorporates multitenancy and virtualization aspects of resources. The authors present a distributed architecture that incorporates principles from security management and software engineering and propose key requirements and a design model for the architecture.

关键词： cloud computing distributed access control multitenancy resource virtualization software engineering ARCHITECTURE Software engineering Security management Cloud Computing Building construction Design models distributed access control

来源：评论

学校读者我要写书评

暂无评论

Agent-Based Approach for distributed access control in Cloud Environments

Agent-Based Approach for Distributed Access Control in Cloud...

引用

International Conference on Advances in Computing, Communications and Informatics

作者： Manoj V. Thomas K. Chandra Sekaran Department of Computer Science and Engineering National Institute of Technology

ISBN: (纸本)9781467361262

Recently, considerable attention has been given to the emerging cloud computing paradigm in the distributed computing environments where, users access various services and shared resources hosted by the service providers, for the successful and efficient completion of their tasks. In this context, in order to prevent the unauthorized access of the distributed system components, authentication and authorization functions are to be enforced effectively. Hence, the proper access control of distributed shared resources assumes high significance, as far as the secure computing paradigm is concerned. In this paper, we make an analysis of the distributed access control issue considering the various mechanisms proposed by the researchers in this area, discussing their merits and demerits. The issues and concerns in different contexts of distributed computing environments are highlighted. We propose an agent-based approach for the distributed access control in cloud environments for mediating the access requests of cloud consumers, considering the present day requirements of the cloud computing paradigm. We also give the workflow model for the proposed agent-based approach for the distributed access control in cloud. A few open issues in the area of distributed access control are also discussed.

关键词： distributed access control access control CLOUDS Clouds distributed computing environment content-based image retrieval ecosystem-based approach Art Therapy Computational modeling Environments unauthorized access

来源：评论

学校读者我要写书评

暂无评论

Efficient CCA2 Secure Flexible and Publicly-Verifiable Fine-Grained access control in Fog Computing

引用

IEEE access 2019年 7卷 11688-11697页

作者： Li, Dawei Liu, Jianwei Wu, Qianhong Guan, Zhenyu Beihang Univ Sch Elect & Informat Engn Beijing 100191 Peoples R China Beihang Univ Sch Cyber Sci & Technol Beijing 100191 Peoples R China

Fog computing enables computation, storage, applications, and network services between the Internet of Things and the cloud servers by extending the Cloud Computing paradigm to the edge of the network. When protecting information security in Fog computing, advanced security with low latency, wide-spread geographical distribution support, and high flexibility should be taken in to considertion first, because of its huge number of nodes. In this paper, we propose a new cryptographic primitive, named CCA2 secure publicly-verifiable revocable large-universe multi-authority attribute-based encryption (CCA2-PV-R-LU-MA-ABE), to achieve flexible fine-grained access control in Fog computing. In this primitive, end nodes in fogs generate private keys from multiple authorities that might be differentiated by their geographical locations or functions, and their attributes can be denoted by any strings in the large universe, which meets diverse needs in practical Fog applications. In addition, the accessibility of nodes can be revoked efficiently even by resource-limited devices. To ensure the validity of ciphertext, this primitive supports public verification and only valid ciphertext can be stored or transmitted. Based on the primitive and the feature of Fog computing, we construct a concrete CCA2-PV-R-LU-MA-ABE scheme. We define the security model of this primitive, which is much more secure than the CPA-secure scheme. Finally, we compare the efficiency of the proposed concrete scheme with that of the existing CPA-secure scheme by both theoretical and experimental analysis, and the results show that the extra consumption of efficiency to improving CPA to CCA2 is considerably low. The proposed scheme is highly secure, flexible, and efficient enough to be deployed in practical Fog computing.

关键词： Fog computing attribute-based encryption distributed access control multi-authority large-universe

来源：评论

学校读者我要写书评

暂无评论

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案：

请选择收藏分类：

通借通还

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：