Privacy Control Model for Academic Information in Private Cloud System

Abstract

Cloud computing is one of today’s most attractive technology areas due to its many advantages like Highly scalable, on-demand, web-accessed IT resources with major cost / cash and flexibility. In this paper, the privacy policies and access control strategies for academic private cloud system are proposed to reduce the risk such as stealing and misuse of the private personal data, user profile management and accessing services offered on the private cloud environment. This system has been configured with Eucalyptus open source cloud infrastructure in which the privacy policies and access control strategies are enhanced. In order to solve these security problems on the private cloud model, we can take advantages of the existing Eucalyptus cloud infrastructure and security in which we can elect to store highly sensitive data of the university in the private storage cloud and less sensitive data in public storage of the private cloud. The main idea of privacy enhancement on a private cloud computing model is applying the role-based access control model as well as deploying privacy policies and security constraints into the sensitive resources. For security purpose, this paper extends the Role Based Access Control model with role relationships and delegation for access rights.