CATT: A cloud based authorization framework with trust and temporal aspects

Abstract

Collaborative environments have put an enormous challenge to secure the information processing systems being used to manage them. Challenges to provide secure framework are amplified when it comes to the domain of flexible and distributed systems as the trust, temporal and performance related aspects need to be catered for. In this paper, we handle some security challenges among others the sub-mentioned ones by proposing a formal cloud-based authorization framework. We have considered trust to be a dynamic attribute to facilitate authorization decisions and have proposed models to handle different qualitative, quantitative and periodicity based temporal constraints. Further, we have presented an architecture for policies evaluation in the cloud.