Access Control Based Data Security in Cloud Computing

摘要

Cloud Computing is mainly about offering services on pay per user basis. It provides Storage-as-a-Service, where data owner can store their data in the cloud. Data is biggest asset to an organization and how confidentiality, authentication and access control can be outsourced. There is a threat to data owner that if CSP (Cloud Service Provider) is malicious or has some vulnerability. This paper addresses the issue by proposing a framework that secures the documents using hybrid cloud infrastructure with which the data security threat in Cloud technology can be solved. This model also provides an access control technique in which access to data based on user privileges. Encryption maintains confidentiality, while authentication ensures only legitimate user accesses the data. Authentic users first encrypt their data and then stores into the cloud. Main purpose of this application is to use a new type of key called “Group Key” that represents a group of users. File Encryption Scheme will be enhanced to use group keys. The proposed framework is extensible enough that it allows an organization to decrypt the encrypted file