Method and system for adaptive security in cloud-based services

a cloud-based service and security mechanism technology, applied in the direction of digital data authentication, security arrangement, instruments, etc., can solve the problems of difficult engineering challenges, application to cloud-based services, and enabling context-awareness in security mechanisms of existing cloud-based services

Inactive Publication Date: 2020-03-12
QATAR UNIVERSITY
View PDF0 Cites 0 Cited by
  • Summary
  • Abstract
  • Description
  • Claims
  • Application Information

AI Technical Summary

Problems solved by technology

However, in a mobile world where people in different environments have access to different documents, such access control decisions need to take into account richer and changing contextual situations that cannot be predetermined only by the content and user permissions of intended files.
Existing context-aware access control proposals demonstrate the need to support rich context-aware access control requirements for mobile end-users, but they have not yet been applied to cloud-based services.
Enabling context-awareness in security mechanisms of existing cloud-services is a difficult engineering challenge because it is not clear how applications should sense the user context, and how the sensed data should be used.

Method used

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View more

Image

Smart Image Click on the blue labels to locate them in the text.
Viewing Examples
Smart Image
  • Method and system for adaptive security in cloud-based services
  • Method and system for adaptive security in cloud-based services
  • Method and system for adaptive security in cloud-based services

Examples

Experimental program
Comparison scheme
Effect test

Embodiment Construction

[0036]The features, structures, or characteristics of the invention described throughout this specification may be combined in any suitable manner in one or more embodiments. For example, the usage of the phrases “certain embodiments,”“some embodiments,” or other similar language, throughout this specification refers to the fact that a particular feature, structure, or characteristic described in connection with the embodiment may be included in at least one embodiment of the present invention.

[0037]Certain embodiments described herein may make use of the following three open-source software tools. These tools may be available under the Apache Software License 2.0. One tool may include Android Mobile Context Instrumentation Framework (AWARE). Another tool may include eXtensible Access Control Markup Language Light (XACMLight) Engine as a web service supporting the creation and management of XACML access control policies. A third tool may include Apache Axis2 server as a software too...

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

PUM

No PUM Login to View More

Abstract

Certain embodiments may generally relate to controlling access to data held in the cloud. A method for controlling access to data held in the cloud may include determining, at a cloud server, the validity of user credentials received from a user device. The method may also include receiving context data related to the user device based on the validity of the user credentials. The method may further include synchronizing the context data with the cloud server. In addition, the method may include enforcing context-sensitive security checks on requests made by the user for resources based on the sensor data collected by the user device.

Description

CROSS REFERENCE TO RELATED APPLICATION[0001]This is a continuation application of U.S. patent application Ser. No. 15 / 785,858, filed Oct. 17, 2017, which application claims priority to U.S. Provisional Application No. 62 / 411,445 filed on Oct. 21, 2016. The entire contents of the above-referenced applications are hereby incorporated by reference in their entirety.FIELD OF THE INVENTION[0002]Certain embodiments may generally relate to controlling access to data held in the cloud. More specifically, certain embodiments of the present invention generally relate to controlling access to data held in the cloud using context information pertaining to a user's accessing mobile device.BACKGROUND OF THE INVENTION[0003]File storage is one of the most popular use cases for cloud computing. A cloud-based file sharing service may generally adopt an open-source development model, providing a universal way to access shared files through any Web browser from desktop or mobile devices.[0004]The acces...

Claims

the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More

Application Information

Patent Timeline
no application Login to View More
Patent Type & AuthorityApplications(United States)
IPC IPC(8): G06F21/55H04L29/06G06F21/31H04W12/08H04L29/08
CPCG06F2221/2111H04W12/00503H04W12/08H04L63/0876G06F21/316H04L67/1095H04L63/107G06F21/552G06F21/31H04L63/20G06F21/40H04L63/1433H04W12/63
InventorNUSEIBEH, BASHARBANDARA, AROSHAKHAN, KHALEDKHAN, NIAMUL HAQUENHLABATSI, ARMSTRONGTUN, THEIN THANYU, YIJUN
OwnerQATAR UNIVERSITY