Emerging Technologies for Developing Countries. First International EAI Conference, AFRICATEK 2017, Marrakech, Morocco, March 27-28, 2017 Proceedings

Research Article

ABAC Based Online Collaborations in the Cloud

Download
346 downloads
  • @INPROCEEDINGS{10.1007/978-3-319-67837-5_7,
        author={Mohamed Madani and Mohammed Erradi and Yahya Benkaouz},
        title={ABAC Based Online Collaborations in the Cloud},
        proceedings={Emerging Technologies for Developing Countries. First International EAI Conference, AFRICATEK 2017, Marrakech, Morocco, March 27-28, 2017 Proceedings},
        proceedings_a={AFRICATEK},
        year={2017},
        month={10},
        keywords={ABAC model Swift Collaborative session Access control},
        doi={10.1007/978-3-319-67837-5_7}
    }
    
  • Mohamed Madani
    Mohammed Erradi
    Yahya Benkaouz
    Year: 2017
    ABAC Based Online Collaborations in the Cloud
    AFRICATEK
    Springer
    DOI: 10.1007/978-3-319-67837-5_7
Mohamed Madani1,*, Mohammed Erradi1,*, Yahya Benkaouz2,*
  • 1: ENSIAS, Mohammed V University in Rabat
  • 2: FSR, Mohammed V University in Rabat
*Contact email: amine.madani@um5s.net.ma, mohamed.erradi@gmail.com, y.benkaouz@um5s.net.ma

Abstract

Nowadays sharing data among organizations plays an important role for their collaboration. During collaborations, the organizations need to access shared information while respecting the access control constraints. In addition, most organizations rely on cloud based solutions to store their data (e.g. openstack). In such platform, data access is regulated by Access Control Lists (ACLs). ACL defines static access rules. It assumes the knowledge of the whole set of users and possible access requests. This make ACL unusable in collaborative context due to the dynamic nature of collaborative sessions. In this paper, we consider ABAC, a flexible and fine-grained model, as an access control model for cloud-based collaborations to overcome the ACL limitations. We provide an architecture that integrate ABAC in the storage level of a cloud platform.