Stand-Out Segmentation Access Control for Cloud Outsourced Data

摘要

Cloud computing provides several benefits to developers, service providers and consumers with respect to scalability, flexibility and availability at inexpensive cost. On the other hand, security is the main concern for cloud computing, particularly outsourced data. We focus on a stand-out segment to protect outsourced of cloud data, which poses various new security challenges that need to be addressed. The security stresses of outsourced data to open fogs serves as our motivation to work for the improvement of data security systems. Existing pretty good privacy (PGP) and Kerberos mechanisms provide the secure authentication. However, both experience the security challenges. When user belongs to multiple group that faces authentication or group policy-setting problem with Kerberos. On other hand, pretty good privacy (PGP) overcomes on this security challenge, but it experiences due to poor usability and lack of ubiquity including long length of public key. This paper introduces the stand-out segmentation access control (SSAC) process for securing cloud outsourced data. The SSAC involves PGP and Kerberos mechanisms for segmentation. The PGP and the Kerberos combination are used for double process authentication purposes by integrating the features of both. The SSAC aims to ensure that no data are leaked and user is properly authenticated with rich usability and ubiquity support. The proposed double authentication process is implemented using a JAVA platform. The results confirm that our proposed approach provides better security than PGP, Kerberos and other known authentication mechanisms.