An access control architecture based on IF-MAP for cloud environments

摘要

Cloud system peculiarities, such as dynamic virtualization management and multi-tenant shared mode, make authentication and access control more important than ever. This paper presents an advanced Access control model based on the TCG'IF-MAP standard and the OASIS XACML standard to regulate the access of Cloud resources. The main novelty of the architecture is the introduction of MAP server, providing detailed, real-time information about the user and resources based on IF-MAP protocol aims to establish trust system domain and provides a resilient reevaluation authorization. In addition, it is quite possible that a single service may be affected by multiple policy decision authorities in cloud, for this we design the PMC module serves as a controller for interaction between the PDP and PEP.