클라우드 서비스 수준 별 권한 분배를 지원하는 구조 및 방법
Architecture and Method to Support Authority Distribution by Cloud Service Level
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
클라우드 컴퓨팅은 IT 서비스를 구성, 배포, 운영하기 위한 기반 기술로 다양한 이해관계자(개발자, 플랫폼 운영자, 고객 등)를 대상으로 제공된다. 이해관계자들이 클라우드 플랫폼을 활용하는데 리소스 충돌 및 데이터 침해를 방지하기 위해 플랫폼은 이해관계자들에게 특정 범위의 리소스를 제어할 수 있는 권한을 RBAC(Role Based Access Control)와 같은 기술을 통해 제공한다. 그러나, 현재 활용되는 권한 분배 기술들은 서로 다른 클라우드 플랫폼에서 상이한 이해관계자 구분과 제공하는 역할 범위의 차이점으로 인해 공통된 적용 방안을 찾기 힘들다는 문제점이 있다. 따라서, 본 논문에서는 권한 분배 구조의 분석을 통해 서로 다른 클라우드 플랫폼에 적용 가능한 리소스 단계의 확장을 지원하는 수준별 권한 분배 구조 및 방법을 제안한다. 제안 방법을 구현한 사례연구를 수행하여 방법의 적용 가능성을 검증하였다. 오픈소스 클라우드 플랫폼 및 관련 연구들과의 비교 분석을 통해 제안한 권한 분배 방법이 기존 방법보다 권한 분배 범위가 확장되고 역할 범위가 세분화된 것을 확인하였다. 본 논문에서 제안한 방법은 멀티 클라우드 환경에서 권한을 분배하기 위한 기반 모델로 적용될 수 있다. 또한 기존 환경에서 지원하지 않는 세분화된 권한 분배를 지원하여 클라우드 역할의 유연성을 높이고, 권한의 확장성을 보장하는 방안으로 활용 가능하다.
Abstract
Cloud computing is a base technology for configuring, distributing, and operating IT services that is provided to various stakeholders(developers, platform operators, customers, etc.). To prevent resource conflicts and data breaches when stakeholders use the cloud platform, the platform provides stakeholders with the authority to control a specific range of resources through technologies such as RBAC (Role Based Access Control). However, the currently used authority distribution technologies have a problem that it is difficult to find a common application approach on different cloud platforms due to different stakeholders and differences in the scope of roles provided. Therefore, in this paper, through analysis of the authority distribution architecture, we propose a level-specific authority distribution architecture and method that is applicable to different cloud platforms and supports expansion of the resource level. By applying the proposed method, we verify the feasibility of implementing the method based on a conducted case study. Through comparative analysis with open source cloud platforms and related researches, it was confirmed that the proposed authority distribution method expanded the scope of authority distribution and further refined the scope of roles compared to the existing method. The proposed method in this paper can be applied as a base model for distributing authority in a multi-cloud environment. In addition, it can be used as a way to increase the flexibility of cloud roles and ensure scalability of rights by supporting authority distribution of rights that is not supported in the existing environment.
참고문헌 (22)
- M. Farmani, "Comprehensive Review of Modern Computing Paradigms Architectures for Intelligent Agriculture", Journal of Electrical and Computer Engineering Innovations (JECEI), 12(1), pp.99~114 (2024)
- U. Upadhyay, "Mitigating Risks in the Cloud-Based Metaverse Access Control Strategies and Techniques", International Journal of Cloud Applications and Computing (IJCAC), 14(1), pp.1~30 (2024)
- J. P. Cruz, "RBAC-SC : Role-Based Access Control Using Smart Contract", IEEE Access, 6, pp.12240~12251 (2018)
- P. Arora, "Attributebased Access Control Model in Healthcare Systems with Blockchain Technology", International Journal of Advanced Computer Science and Applications (IJACSA), 14(5), pp.793~803 (2023)
- R. E. Sibai, "A survey on access control mechanisms for cloud computing", Transactions on Emerging Telecommunications Technologies, 31(2), pp.9494~9532 (2019)
- "OpenStack"[URL]
- P. C. Cañizares, "Simcan2Cloud : a discrete-event-based simulator for modelling and simulating cloud computing infrastructures", Journal of Cloud Computing, 12, pp.1~31 (2023)
- C. Chilipirea, "A Comparison of Private Cloud Systems", 201630th International Conference on Advanced Information Networking and Applications Workshops, pp.139~143 (2016)
- C. Fisher, "Cloud versus On-premise Computing", American Journal of Industrial and Business Management, 8(9), pp.1991~2006 (2018)
- T. E. Ali, "Efficient Private Cloud Resources Platform", The 3rd International Conference on Electrical, Communication and Computer Engineering (ICECCE), pp.12~13 (2021)
- R. Islam, "The Future of Cloud Computing : Benefits and Challenges", International Journal of Communications : Network and System Sciences, 16, pp.53~65 (2023)
- N. Bessghaier, "What Constitutes the Deployment and Run-time Configuration System? An Empirical Study on OpenStack Projects", ACM Transactions on Software Engineering and Methodology, 33(1), pp.1~37 (2023)
- "CloudStack"[URL]
- S. Nawaz, "Cloud Computing Services and Security Challenges : A Review", LGU Research Journal of Computer Science & Information Technology, 7(2), pp.47~55 (2023)
- "IAM"[URL]
- "Identity Platform"[URL]
- R. Dixit, "Identity and Access Control Techniques for Enhanced Data Communication in Cloud", Contemporary Mathmatics, 5(1), pp.1~16 (2024)
- C. B. González, "BIGOWL4DQ : Ontology-driven approach for Big Data quality meta-modelling, selection and reasoning", Information and Software Technology, 167, pp.1~16 (2023)
- M. A. Alshammari, "Cloud Computing Access Control Using Blockchain", Journal of Intelligent Systems and Applications in Engineering (IJISAE), 12(9), pp.380~390 (2023)
- S. Rouhani, "Blockchain based Access Control Systems : State of the Art and Challenges", IEEE, ACM International Conference on Web Intelligence, pp.2019[DOI]
- V. Jyotinagar, "Developing an OpenStack Environment : An Exploration of Experimentation and the Diagnostic Research", 2023 2nd International Conference on Edge Computing and Applications(ICECAA), pp.42~49 (2023)
- A. Mycek, "Agent-based Simulation and Analysis of Infrastructure-as-Code Process to Build and Manage Cloud Environment", Communications of the ECMS(the European Council for Modelling and Simulation), 37(1), pp.1~8 (2023)