Strategy of Domain and Cross-Domain Access Control Based on Trust in Cloud Computing Environment

摘要

Under the current cloud computing environment, a reasonable and practicable access control strategy is needed, which is a guarantee to protect cloud computing suppliers to provide services and many cloud users access to services. In this paper, based on analysis of many cloud computing safety features, trust management is introduced into the cloud computing service access control, within the domain of a trust-based access control strategy, in domain, presents a trust-based access control policy. Credible value will be given through the comprehensive treatment of the entity, and then AAC (authentication and authorization center) authorizes the appropriate access rights to achieve the control of the monomer in the domain. Combined with the characteristics of the existing cloud computing environment, in multiple management domains, this paper proposes a role mapping, with the role mapping relationship between the domain, which can make the inter-domain access to resources and security shared access between different domains, in order to avoid the problem of permission penetration and privilege escalation, this paper presents the mirror role based on role mapping, ultimately solves the problem.