2013/08/15 by Muhammad Rizwan Asghar, Mihaela Ion, Asghar, Muhammad Rizwan +5
Computer Science · Social Sciences · #Access Control and Trust #Cryptography and Data Security #Cryptography and Security (cs.CR) #FOS: Computer and information sciences #Privacy-Preserving Technologies in Data
paper · pdf · doi:10.48550/arxiv.1308.3489
openalex publication_date 2013/08/15 · openalex created_date 2022/10/04 · openalex updated_date 2026/07/28
Data outsourcing is a growing business model offering services to individuals\nand enterprises for processing and storing a huge amount of data. It is not\nonly economical but also promises higher availability, scalability, and more\neffective quality of service than in-house solutions. Despite all its benefits,\ndata outsourcing raises serious security concerns for preserving data\nconfidentiality. There are solutions for preserving confidentiality of data\nwhile supporting search on the data stored in outsourced environments. However,\nsuch solutions do not support access policies to regulate access to a\nparticular subset of the stored data.\n For complex user management, large enterprises employ Role-Based Access\nControls (RBAC) models for making access decisions based on the role in which a\nuser is active in. However, RBAC models cannot be deployed in outsourced\nenvironments as they rely on trusted infrastructure in order to regulate access\nto the data. The deployment of RBAC models may reveal private information about\nsensitive data they aim to protect. In this paper, we aim at filling this gap\nby proposing textbf mathitESPOONERBAC for enforcing RBAC policies in\noutsourced environments. mathitESPOONERBAC enforces RBAC policies in an\nencrypted manner where a curious service provider may learn a very limited\ninformation about RBAC policies. We have implemented mathitESPOONERBAC\nand provided its performance evaluation showing a limited overhead, thus\nconfirming viability of our approach.\n