A privacy preserving authorisation system for the cloud

Journal of Computer and System Sciences

Volumn 78, Issue 5, 2012, Pages 1359-1373

  Chadwick, David W ^a   Fatema, Kaniz ^a  

^a UNIVERSITY OF KENT   (United Kingdom)

Author keywords

Cloud security; Credential validation service; Obligations; Policy decision point; Privacy policies; Sticky policies

Indexed keywords

DECISION MAKING; INFRASTRUCTURE AS A SERVICE (IAAS);

CLOUD SECURITIES; CREDENTIAL VALIDATION SERVICE; OBLIGATIONS; POLICY DECISION POINTS; PRIVACY POLICIES; STICKY POLICIES;

DATA PRIVACY;

EID: 84861610379     PISSN: 00220000     EISSN: 10902724     Source Type: Journal    
DOI: 10.1016/j.jcss.2011.12.019     Document Type: Conference Paper

References (30)

1. Robert Gellman, WPF REPORT: Privacy in the clouds: Risks to privacy and confidentiality from cloud computing, February 23, 2009.
2. OASIS, eXtensible Access Control Markup Language (XACML) Version 2.0, OASIS Standard, 1 February, 2005.
3. OASIS, eXtensible Access Control Markup Language (XACML) Version 3.0, Committee Specification 1, 10 August, 2010.
4. David Chadwick, Gansen Zhao, Sassa Otenko, Romain Laborde, Linying Su, and Tuan Anh Nguyen PERMIS: a modular authorization infrastructure Concurr. Comput. 20 11 10 August, 2008 1341 1357
5. W3C: The Platform for Privacy Preferences 1.0 (P3P 1.0), Technical Report, 2002.
6. M. Blaze, J. Feigenbaum, J. Ioannidis, The KeyNote Trust-Management System Version 2, RFC 2704, September 1999.
7. David W. Chadwick, Linying Su, and Romain Laborde Coordinating access control in grid services Concurr. Comput. 20 9 25 June, 2008 1071 1094
8. J. Alqatawna, E. Rissanen, B. Sadighi, Overriding of access control in XACML, in: Proc. 8th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 07), 13-15 June, 2007, pp. 87-95.
9. David W. Chadwick, Sassa Otenko, and Tuan Anh Nguyen Adding support to XACML for multi-domain user to user dynamic delegation of authority Int. J. Inf. Secur. 8 2 April, 2009 137 152
10. Siani Pearson, Taking account of privacy when designing cloud computing services, in: Proceedings of ICSE- Cloud 09, Vancouver, 2009.
11. Siani Pearson, Andrew Charlesworth, Accountability as a way forward for privacy protection in the cloud, in: Proceedings of the 1st International Conference on Cloud Computing, Beijing, China, 2009.
12. Siani Pearson, Yun Shen, Miranda Mowbray, A privacy manager for cloud computing, HP Laboratories, HPL-2009-156.
13. Miranda Mowbray, Siani Pearson, A client-based privacy manager for cloud computing, in: COMSWARE 09, ACM, 2009.
14. Dan Lin, Anna Squicciarini, Data protection models for service provisioning in the cloud, in: SACMAT 10, Pittsburgh, Pennsylvania, USA, 2010.
15. Wassim Itani, Ayman Kayssi, Ali Chehab, Privacy as a service: Privacy-aware data storage and processing in cloud computing architectures, in: Eighth IEEE International Conference on Dependable, Autonomic and Secure Computing DASC 09, 2009.
16. Jian Wang, Yan Zhao, Shuo Jiang, Jiajin Le, Providing privacy preserving in cloud computing, in: International Conference on Test and Measurement, ICTM 09, 2009.
17. Ana Ferreira, David Chadwick, Pedro Farinha, Ricardo Correia, Gansen Zhao, Rui Chilro, Luis Antunes, How to securely break into RBAC: the BTG-RBAC model, in: Annual Computer Security Applications Conference, Honolulu, Hawaii, December 2009.
18. ITU-T Rec X.812 (1995)|ISO/IEC 10181-3:1996, Security Frameworks for open systems: Access control framework.
19. Suns XACML PDP, available from http://sunxacml.sourceforge.net/.
20. K. Böhm, S. Etalle, J.I. den Hartog, C. Hütter, S. Trabelsi, D. Trivellato, and N. Zannone A flexible architecture for privacy-aware trust management J. Theor. Appl. Electron. Commer. Res. 5 2 2010 77 96
21. OASIS, SAML 2.0 Profile of XACML, Version 2.0, OASIS Committee Specification 01, 10 August, 2010.
22. David Chadwick, Linying Su, Use of WS-TRUST and SAML to access a Credential Validation Service, OGF GWD-R-P, 25 June, 2009.
23. David W. Chadwick, Linying Su, Romain Laborde, Use of XACML Request Context to access a PDP, OGF GWD-R-P, 25 June, 2009.
24. V. Venturi, T. Scavo, D.W. Chadwick, Use of SAML to retrieve Authorization Credentials, OGF GWD-R-P, 25 June, 2009.
25. OASIS, WS-Trust 1.3, OASIS Standard, 19 March, 2007.
26. OASIS, Assertions and Protocol for the OASIS Security Assertion Markup Language (SAML) V2.0, OASIS Standard, 15 March, 2005.
27. David W. Chadwick, Sean Anthony, Using WebDAV for improved certificate revocation and publication, in: Public Key Infrastructure, Proc. of 4th European PKI Workshop, Lecture Notes in Comput. Sci., vol. 4582, Palma de Mallorca, Spain, June, 2007, pp. 265-279.
28. N. Zhang, L. Yao, A. Nenadic, J. Chin, C. Goble, A. Rector, D. Chadwick, S. Otenko, and Q. Shi Achieving fine-grained access control in virtual organisations Conc. Comp. Prac. Exp. 19 9 June 2007 1333 1352
29. M.R. Palankar, A. Iamnitchi, M. Ripeanu, S. Garfinkel, Amazon S3 for science grids: a viable solution?, in: Proc. 2008 Int. Wshop on Data-Aware Distributed Computing, Boston, MA, USA, June, 2008, DADC 08, ACM, New York, NY, pp. 55-64.
30. Kaniz Fatema, David W. Chadwick, Brendan Van Alsenoy, Legal policies to protect privacy, IFIP Summer School 2011 (see http://disi.unitn.it/security/ ifip-summerschool2011/index.html), in: Lecture Notes in Comput. Sci., in press.