Research and implementation of cloud storage access control technology based on ontology

Research and implementation of cloud storage access control technology based on ontology

Hong, East China University of Technology

Based on the characteristics of the access control in cloud storage, based on the cloud storage standard (CDMI), the access control domain, the storage object and the role inheritance of RBAC model are improved, and the time constraints of roles and permissions are increased, and the ontology of the access control model is established by using ontology technology and owl language. The semantic technique describes the entity and strategy of DONTO_RBAC, which realizes the inference of access control security strategy in the context of multiple domain, such as contradiction test, automatic classification based on the necessary and sufficient condition and automatic case archiving. The model implements access control management through the Python language and establishes an API in restful form, which is requested and invoked through the RESTful format command donto_ The RBAC system experiments in the campus-level cloud storage file system based on the OpenStack Swift cloud storage component, verifies that the Donto RBAC system can efficiently and securely manage the distributed and Multi-domain cloud storage data.

Research and implementation of cloud storage access control technology based on ontology