End-User Authentication Control in Cloud-based ERP Systems

摘要

Cloud Security is the use of latest technology and security techniques to safeguard data, applications and infrastructure associated with Cloud Computing. The set of policies, procedures, technologies, and controls that function jointly to safeguard cloud-based systems, infrastructures and data are known as the Cloud Computing Security Model. This paper reviews several Cloud Computing Security Models with a close look at the model that addresses data security challenges in cloud-based Enterprise Resource Planning (ERP) systems and proposes an End-User Authentication Control Model for Cloud-based ERP systems. This is a cloud computing security model that uses Enterprise Access Directory, Enterprise Data Fragmentation in cloud and End-user Access Queries, to ensure that End users share a greater security responsibility. The proposed model, when compared with other exiting models, will encourage more end-user participation in enterprise data security in the cloud. The proposed model also mitigates the impact that a malicious insider might have on the enterprise cloud data set, since no single user can gain access to the whole cloud-based enterprise database at the same time. The proposed model considers end-user role and responsibility within the enterprise to determine the level of access and to data in the cloud-based ERP system.