关键词: 云计算, 基于角色的访问控制, 密文策略属性基加密, 信任

Abstract:

Role-Based Access Control（RBAC） is a typical access control model that associates users with permissions through roles, making access control more flexible and easier to manage. However, in cloud computing environment, RBAC will have some security issues, such as the abuse of users’ permissions, the coarse granularity of access control, etc. To solve the above problems, an Attribute and Trust based RBAC model is proposed, named as ATRBAC. ATRBAC adopts the idea of ??Ciphertext Policy Attribute-Based Encryption（CP-ABE） and the method of trust evaluation. In ATRBAC, on the one hand, a user is granted the attribute set, which includes the trust value attribute. On the other hand, a role is embedded in the access structure, which includes the trust threshold. Only when the user’s attribute set matches the role’s access structure, the user can obtain the role and the corresponding permissions. The experimental results indicate that ATRBAC can realize dynamic and automatic authorization of permissions and finer-grained access control, which enhances the security of data and resources in cloud computing.

Key words: cloud computing, Role-Based Access Control（RBAC）, Ciphertext Policy Attribute-Based Encryption（CP-ABE）, trust