research-article

A novel attribute-based access control system for fine-grained privacy protection

Authors:

Ha Xuan Son,

Nguyen Minh HoangAuthors Info & Claims

ICCSP '19: Proceedings of the 3rd International Conference on Cryptography, Security and Privacy

Pages 76 - 80

https://doi.org/10.1145/3309074.3309091

Published: 19 January 2019 Publication History

Get Access

Abstract

Public cloud have recently become popular platform for sharing data in real-time on web applications due to their simplicity in design and effectiveness in horizontal scaling and performance. However, no proper consideration has been fully investigated so far in privacy protection for public cloud. While many studies have acknowledged this issue, recent studies have not provided a fine-grained access control system for privacy protection in cloud system. As the data set becomes larger, we have to confront more privacy challenges. In this paper, we propose a comprehensive framework for enforcing attribute-based security protection in the public cloud together with the feature of data privacy protection by using privacy which define in XML format. With the proposed model, a request can be evaluated not only by access purpose but also by subject, action, resource, environment attributes. The experiment is carried out to illustrate the relationship between the processing time for access decision and the complexity of policies.

References

[1]

C. A. Ardagna et al. An xacml-based privacy-centered access control system. In Proceedings of the first ACM workshop on Information security governance, pages 49--58. ACM, 2009.

Digital Library

Google Scholar

[2]

E. Bertino et al. Access control for databases: concepts and systems. Foundations and Trends® in Databases, 3(1-2):1--148, 2011.

Digital Library

Google Scholar

[3]

P. Biswas, R. Sandhu, and R. Krishnan. An attribute-based protection model for json documents. In International Conference on Network and System Security, pages 303--317. Springer, 2016.

Crossref

Google Scholar

[4]

V. C. Hu et al. Guide to attribute based access control (abac) definition and considerations (draft). NIST special publication, 800(162), 2013.

Google Scholar

[5]

M. H. Nguyen et al. A dynamic solution for fine-grained policy conflict resolution. In International Conference on Cryptography, Security and Privacy. ACM, 2019.

Digital Library

Google Scholar

[6]

H. X. Son and E. Chen. Towards a fine-grained access control mechanism for privacy protection and policy conflict resolution. International Journal of Advanced Computer Science and Applications, 10(2), 2019.

Crossref

Google Scholar

[7]

H. X. Son, T. K. Dang, and F. Massacci. Rew-smt: A new approach for rewriting xacml request with dynamic big data security policies. In International Conference on Security, Privacy and Anonymity in Computation, Communication and Storage, pages 501--515. Springer, 2017.

Crossref

Google Scholar

[8]

H. X. Son, T. K. Dang, and L. K. Tran. Xacs-dypol: Towards an xacml-based access control model for dynamic security policy.

Google Scholar

[9]

H. X. Son et al. Rew-xac: an approach to rewriting request for elastic abac enforcement with dynamic policies. In Advanced Computing and Applications (ACOMP), 2016 International Conference on, pages 25--31. IEEE, 2016.

Crossref

Google Scholar

[10]

H. X. Son et al. Toward an privacy protection based on access control model in hybrid cloud for healthcare systems. In The 12th International Conference on Computational Intelligence in Security for Information Systems. Springer, 2019.

Google Scholar

[11]

Q. N. T. Thi et al. Using json to specify privacy preserving-enabled attribute-based access control policies. In International Conference on Security, Privacy and Anonymity in Computation, Communication and Storage. Springer, 2017.

Google Scholar

[12]

H. Wang, L. Sun, and V. Varadharajan. Purpose-based access control policies and conflicting analysis. In IFIP International Information Security Conference, pages 217--228. Springer, 2010.

Crossref

Google Scholar

Cited By

View all

Quy TTrong NKhanh HHuong HKhoa TKhiem HPhuc NHieu MLoc VKha NAnh NHien QBang LBao QNgan NTriet M(2024)Transforming Child Health Records: Integrating Blockchain, NFTs, and IPFS for Enhanced Medical Data ManagementMobile, Secure, and Programmable Networking10.1007/978-3-031-52426-4_9(120-138)Online publication date: 25-Jan-2024
https://doi.org/10.1007/978-3-031-52426-4_9
Quy TTrong NKhanh HHuong HKhoa TKhiem HPhuc NHieu MLoc VKha NAnh NHien QBang LBao QNgan NTriet M(2024)Blockchain-Driven Animal Healthcare: Leveraging NFTs, IPFS, and Smart Contracts for Comprehensive Animal Medical RecordMobile, Secure, and Programmable Networking10.1007/978-3-031-52426-4_8(100-119)Online publication date: 25-Jan-2024
https://doi.org/10.1007/978-3-031-52426-4_8
Nguyen VNguyen TVo HDang KGia KTrong PKhanh BKim N(2024)Leveraging Blockchain and NFTs for Collaborative Real Estate TransactionsCloud Computing – CLOUD 202310.1007/978-3-031-51709-9_1(1-14)Online publication date: 14-Jan-2024
https://doi.org/10.1007/978-3-031-51709-9_1
Show More Cited By

Index Terms

A novel attribute-based access control system for fine-grained privacy protection
1. Security and privacy
  1. Security services
    1. Access control

Recommendations

A dynamic solution for fine-grained policy conflict resolution
ICCSP '19: Proceedings of the 3rd International Conference on Cryptography, Security and Privacy

Access control is a security technique that specifies access rights to resources in a cloud computing environment. As information in cloud systems nowadays become more complex, it plays an important role in authenticating and authorizing users and ...
Towards Attribute-Centric Access Control: an ABAC versus RBAC argument

Recent developments in attribute-based access control have fueled the conventional debate regarding the pros and cons of Attributes-based access control ABAC versus Role-based access control RBAC. However, existing arguments have been primarily focused ...
Entity-Based Access Control: supporting more expressive access control policies
ACSAC '15: Proceedings of the 31st Annual Computer Security Applications Conference

Access control is an important part of security that restricts the actions that users can perform on resources. Policy models specify how these restrictions are formulated in policies. Over the last decades, we have seen several such models, including ...

Comments

Please enable JavaScript to view thecomments powered by Disqus.

Information & Contributors

Information

Published In

ICCSP '19: Proceedings of the 3rd International Conference on Cryptography, Security and Privacy

January 2019

303 pages

ISBN:9781450366182

DOI:10.1145/3309074

Conference Chairs:
Yulin Wang
Wuhan University, China
,
Chin-Chen Chang
Feng Chia University, Taiwan

Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for components of this work owned by others than the author(s) must be honored. Abstracting with credit is permitted. To copy otherwise, or republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. Request permissions from [email protected].

Publisher

Association for Computing Machinery

New York, NY, United States

Publication History

Published: 19 January 2019

Permissions

Request permissions for this article.

Request Permissions

Check for updates

Author Tags

Qualifiers

Research-article

Conference

ICCSP 2019

ICCSP 2019: 2019 the 3rd International Conference on Cryptography, Security and Privacy

January 19 - 21, 2019

Kuala Lumpur, Malaysia

Contributors

Other Metrics

View Article Metrics

Bibliometrics & Citations

Bibliometrics

Article Metrics

26
Total Citations
View Citations
191
Total Downloads

Downloads (Last 12 months)16
Downloads (Last 6 weeks)0

Reflects downloads up to 02 Oct 2024

Other Metrics

View Author Metrics

Citations

Cited By

View all

Quy TTrong NKhanh HHuong HKhoa TKhiem HPhuc NHieu MLoc VKha NAnh NHien QBang LBao QNgan NTriet M(2024)Transforming Child Health Records: Integrating Blockchain, NFTs, and IPFS for Enhanced Medical Data ManagementMobile, Secure, and Programmable Networking10.1007/978-3-031-52426-4_9(120-138)Online publication date: 25-Jan-2024
https://doi.org/10.1007/978-3-031-52426-4_9
Quy TTrong NKhanh HHuong HKhoa TKhiem HPhuc NHieu MLoc VKha NAnh NHien QBang LBao QNgan NTriet M(2024)Blockchain-Driven Animal Healthcare: Leveraging NFTs, IPFS, and Smart Contracts for Comprehensive Animal Medical RecordMobile, Secure, and Programmable Networking10.1007/978-3-031-52426-4_8(100-119)Online publication date: 25-Jan-2024
https://doi.org/10.1007/978-3-031-52426-4_8
Nguyen VNguyen TVo HDang KGia KTrong PKhanh BKim N(2024)Leveraging Blockchain and NFTs for Collaborative Real Estate TransactionsCloud Computing – CLOUD 202310.1007/978-3-031-51709-9_1(1-14)Online publication date: 14-Jan-2024
https://doi.org/10.1007/978-3-031-51709-9_1
Kha NTrong NTriet MKhoa TKhiem HPhuc NHieu MMinh NDuy PThuan TBang LBao QNgan NTung LVinh N(2024)Blockchain-Driven Pet Healthcare: Integrating NFTs, IPFS, and Smart Contracts for Enhanced Pet Medical Data ManagementServices Computing – SCC 202310.1007/978-3-031-51674-0_3(33-47)Online publication date: 11-Jan-2024
https://doi.org/10.1007/978-3-031-51674-0_3
Gupta BGaurav AKumar Panigrahi P(2023)Analysis of security and privacy issues of information management of big data in B2B based healthcare systemsJournal of Business Research10.1016/j.jbusres.2023.113859162(113859)Online publication date: Jul-2023
https://doi.org/10.1016/j.jbusres.2023.113859
Nam TKhiem HTriet MHong KKhoa TBao QPhuc NHieu MLoc VQuy TAnh NHien QBang LTrong DNgan NSon HLuong H(2023)SPaMeR: Securing Patient Medical Records in the Cloud - A Microservice and Brokerless Architecture ApproachWeb Services – ICWS 202310.1007/978-3-031-44836-2_3(32-46)Online publication date: 28-Sep-2023
https://doi.org/10.1007/978-3-031-44836-2_3
Anh NKhanh VPhuc NKhoa TKhiem HTrong NLoc VDuy NBao THieu DNghia HNgan NHuong L(2023)Towards a Medical Test Results Management System Based on Blockchain, Smart Contracts, and NFT: A Case Study in VietnamDigital Health Transformation, Smart Ageing, and Managing Disability10.1007/978-3-031-43950-6_7(79-91)Online publication date: 22-Sep-2023
https://doi.org/10.1007/978-3-031-43950-6_7
Nguyen HTrong NHuong LDang KGia KTrong PVan HPhu LQuoc DTran NThe ANghia HKhanh BTuan KKim NTran BDoan HVo H(2023)Towards a Medical Waste Classification System Based on Blockchain, Smart Contracts, and NFT TechnologiesDigital Health Transformation, Smart Ageing, and Managing Disability10.1007/978-3-031-43950-6_18(205-217)Online publication date: 22-Sep-2023
https://doi.org/10.1007/978-3-031-43950-6_18
Phuc NKhoi QHuong LKhoa TKhiem HTrong NLoc VDuy NBao THieu DAnh NNghia HNgan NKhanh V(2023)Towards a Blockchain, Smart Contract, and NFT Based Medical Waste Classification System: A Case Study in VietnamComputer Information Systems and Industrial Management10.1007/978-3-031-42823-4_8(92-107)Online publication date: 15-Sep-2023
https://doi.org/10.1007/978-3-031-42823-4_8
Khanh BVo HTrong PDang KGia KTrong NVan HPhu LQuoc DTran NThe ANghia HDoan HTran BKim NHuong L(2023)Towards a Blockchain, Smart Contract, and NFT Based Waste Treatment System for Developing Countries: A Case Study in VietnamComputer Information Systems and Industrial Management10.1007/978-3-031-42823-4_5(51-65)Online publication date: 15-Sep-2023
https://doi.org/10.1007/978-3-031-42823-4_5
Show More Cited By

View Options

Get Access

Login options

Check if you have access through your login credentials or your institution to get full access on this article.

Cited By

Index Terms

Recommendations

A dynamic solution for fine-grained policy conflict resolution

Towards Attribute-Centric Access Control: an ABAC versus RBAC argument

Entity-Based Access Control: supporting more expressive access control policies