Role and attribute based access control model for web service composition in cloud environment

摘要

With the rapid growth of computing technologies, cloud has taken its space in a wide range of Enterprise Management environments. Its availability, cost effectiveness and usability make it popular. Cloud computing offers three delivery models namely Iaas, Paas and Saas. This paper focuses on the Saas model of cloud. The two main issues in Software as a service delivery model are Access Control and composition of policies when services are composed. A proper privacy preserving access control model is required for secure service provisioning and composition. In our proposed framework, a secure service composition is made possible by ranking the possible chains of composite services according to user's role and the sensitivity of their data. According to the role of a user, services are chosen for composition and the policies are composed. Also the privacy of the user is maintained here.