Privacy Aware Access Control for Cloud-Based Data Platforms

This paper presents OPENi's Personal Cloudlets framework as a novel approach to enhancing users access control and privacy over their persinal data on a cloud-based platform. This paper describes the OPENi concepts and the requirements that influenced the design and implementation of OPENi's Personal Cloudlet Framework. We describe the architecture and how OPENi, through the use of REST based end-points, object-based access control, OPENi Types, and stateless JSON Web Token (JWT), allows users share, reuse, and control access to their data across many mobile applications while maintaining cloud scalability. This paper also describes how a number of the Personal Cloudlet framework's features enhance a users privacy and control. These features include the User Dashboard, the Privacy Preserving Data Aggregator, and the fine grained access control mechanism.