An Access Control Method of Cloud Computing Resources Based on Quantified-Role

A quantified-role based access control model for cloud computing is proposed to provide fine-grained authorization and dynamic adjustment of permissions. With quantified value assigned to permissions tuples, any part privileges of a role can be accurately described and managed. Behavior value is proposed to reflect a cloud user's operations security, and a mapping function from behavior value to quantified role is established. Theoretical analysis and application results show the presented model can significantly reduce number of roles in cloud computing systems, improve efficiency of authorization, and implement dynamic adjustment of cloud users' permissions.