Role-Centric Circle-of-Trust in Multi-tenant Cloud IaaS - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

Role-Centric Circle-of-Trust in Multi-tenant Cloud IaaS

Navid Pustchi
  • Function : Author
  • PersonId : 1022654
Ravi Sandhu
  • Function : Author
  • PersonId : 978076


Currently, collaboration is a major challenge in adopting cloud Infrastructure-as-a-Service (IaaS). Enterprise work-flow intrinsically mandates collaboration across its tenant boundaries as well as with associated organizations’ tenants in the cloud. In this paper, we investigate a Circle-of-Trust approach where tenants establish trust within a circle of tenants for the purpose of collaboration. We present a novel extension of role-centric access control models to provide collaboration in the context of homogeneous and heterogeneous circles. In a homogeneous circle, our approach allows tenants to equally assert cross-tenant user assignments to enable access to shared resources. In a circle with non-uniform tenants, attributes are added to distinguish user-assignments where tenants are differentiated by type in the heterogeneous circle. Particularly, tenant-trust relation is established within a group of tenants authorizing user-role assignments across tenants.
Fichier principal
Vignette du fichier
428203_1_En_8_Chapter.pdf (783.1 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01633665 , version 1 (13-11-2017)





Navid Pustchi, Ravi Sandhu. Role-Centric Circle-of-Trust in Multi-tenant Cloud IaaS. 30th IFIP Annual Conference on Data and Applications Security and Privacy (DBSec), Jul 2016, Trento, Italy. pp.106-121, ⟨10.1007/978-3-319-41483-6_8⟩. ⟨hal-01633665⟩
264 View
67 Download



Gmail Facebook X LinkedIn More