Abstract:Cloud Storage is a multi-tenancy shared environment,so achieving data separation between different users effectively in the platform has become one of issues most concerned by users.In this paper,we provide business users a flexible access control policy,which is built on top of RBAC(Role-based Access Control),combined with organization label and a variety of security attributes with logical combinations.First of all,it provides strict inter-enterprise data isolation on cloud storage,ensuring that business users could not access data which doesn't belong to their organization.Moreover,it provides proper separation of organization internal data.Business users could customize the policy flexibly according to their own security requirements,isolating data from different sectors or geographical area.Finally,the policy provides a mechanism for corporations to share data on cloud storage by introducing the concept of "virtual organization",and guarantee companies with the same conflict set of interest could not be allowed to share data through traditional Chinese Wall Policy.This paper presents the design and implementation of a prototype based Hadoop distributed file system(HDFS),including security label,security policy,security decision module,enforcement procedure of security decision and user command interface.Then it analyzes the effectiveness and performance of the security mechanisms with experiments.The result shows that the policy meets the security requirement well and loss of system run-time performance is within an acceptable range.

Research on Cloud Storage Access Control System

An Effective and Secure Access Control System Scheme in the Cloud

The Research and Prospect of Secure Data Access Control in Cloud Storage Environment

A scheme to ensure data security of cloud storage

Secure Data Access and Sharing Scheme for Cloud Storage

Research on Data Protection Based on Encrypted Attribute Access Control in Cloud Computing

Ensure Data Security in Cloud Storage

Access control scheme based on blockchain and attribute-based searchable encryption in cloud environment

Research of Access Control System Based on Attribute Encryption Technology that Suitable for Dispatching and Control Cloud

A Novel Data Access Scheme In Cloud Computing

Flexible Access Control in a Cloud Storage System

The Design and Implementation of the Cloud Storage Based Security Enhancement System

Access Control and Anti-copy Scheme of Cloud Storage Data Based on Blockchain

Study of the Secure Access Strategy of Cloud Storages

Survey on Access Control Technologies for Cloud Computing

An Access Control Policy for Multi-tenancy Cloud Storage Platform

A Hierarchic Secure Cloud Storage Scheme Based on Fog Computing

Dual Access Control for Cloud-Based Data Storage and Sharing

Cloud Data Security Access with Privacy-Preserving

Survey of secure cloud storage

Key Techniques of Access Control for Cloud Computing