Cloud-Based Access Control Framework for Effective Role Provisioning in Business Application

M. Auxilia, K. Raja, K. Kannan

International Journal of System Dynamics Applications · 2019 · 12 citations · 19 references

DOIFull text

Open access

Concepts

TL;DR

Secure information sharing is essential for privacy in business organizations, yet existing solutions leave room for novel protection schemes when large data sets are involved. The authors propose a Cloud‑Based Access Control (C‑BAC) framework that can be integrated into any business application. The framework employs a Policy Enforcement Point to prevent unauthorized information sharing among employees. C‑BAC with RSA outperforms existing access‑control schemes using AES and RSA by enhancing security relative to the number of employees handling data.

Abstract

In the evolution of social networks and big data, secure information sharing is a crucial task. When information is shared between the user and the organization admin, security plays a key role in any business organization in terms of privacy. Though many fruitful solutions prevail to protect the data integrity and privacy, there is a huge space for novel data protection schemes where a large set of data are involved. In this article, the Cloud-Based Access Control (C-BAC) framework is proposed which can fit in any business organization application. In this C-BAC, Policy Enforcement Point (PEP) is used to avoid unwanted information sharing with the neighboring employee. C-BAC framework with RSA provides security, based on the number of employees with the data handled by the particular employee, better than the existing access control framework with asymmetric encryption standard (AES) and Rivest–Shamir–Adleman (RSA) in terms of individual information handling.

References

19