Token-Revocation Access Control to Cloud-Hosted Energy Optimization Utility for Environmental Sustainability
Source abstract
Abstract
To increase the usage of renewable energy, it is vital to maximize local energy production by properly combining various renewable-energy sources by collecting their data and storing it on the cloud. The energy optimization utility, which is used for making decisions to optimize renewable-energy resources, is hosted on the cloud to benefit from cloud capabilities in data storage. Hosting such sensitive data and utilities on the cloud has created some cybersecurity challenges. This paper presents a new token-revocation access control (TR-AC) which revokes the authorization of malicious users before authorizing them to access cloud-hosted energy optimization utilities. TR-AC employs a set of multi-authorities to measure the authentic level for each authenticated user. Although the user is authenticated to access the online system, this authentication can be revoked to utilize the energy optimization utility based on the user’s level of authentication. The cloud storage servers are not fully trusted and, therefore, have no control over access controls. Finally, the proposed TR-AC has been proven to be secure against any attacker that is not authentic according to Diffie-Hellman assumptions. In addition, performance analysis has proven that the time elapsed for both encryption and decryption in TR-AC is very small compared with previously introduced schemes. Therefore, it will not affect the performance of the cloud-hosted system.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Cryptography and Data Security · Cloud Data Security Solutions · Access Control and Trust
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Computer Science Department, College of Computer Sciences & Information Technology, King Faisal University, Al-Ahsa 31982, Saudi Arabia
Mathematics Department, Faculty of Science, Zagazig University, Zagazig 44519, Egypt
Funding
Deputyship for Research & Innovation, Ministry of Education, Saudi Arabia
References (25)
Show source-provided references
1. Basarudin, N.A., Yeon, A.L., and Yusoff, Z.M. (2022). Good Governance and the Sustainable Development Goals in Southeast Asia, Routledge.
2. Prospects and challenges of renewable energy-based microgrid system in Bangladesh: A comprehensive review10.1007/s10098-022-02301-5 ↗
3. Raimundo, R.J., and Rosário, A.T. (2022). Cybersecurity in the Internet of Things in Industrial Management. Appl. Sci., 12.10.3390/app12031598 ↗
4. Fagbola, F.I., and Venter, H.S. (2022). Smart digital forensic readiness model for shadow IoT devices. Appl. Sci., 12.10.3390/app12020730 ↗
5. Vangala, A., Das, A.K., Chamola, V., Korotaev, V., and Rodrigues, J.J. (2022). Security in IoT-enabled smart agriculture: Architecture, security solutions and challenges. Clust. Comput., 1–24.10.1007/s10586-022-03566-7 ↗
6. Why do terrorists target the energy industry? A review of kidnapping, violence and attacks against energy infrastructure10.1016/j.erss.2021.102459 ↗
7. Fragkos, G., Johnson, J., and Tsiropoulou, E.E. (2022). Centralized and Decentralized Distributed Energy Resource Access Control Implementation Considerations. Energies, 15.10.3390/en15176375 ↗
8. A systematic literature review for authorization and access control: Definitions, strategies and models10.1108/IJWIS-04-2022-0077 ↗
9. Hadoop Distributed File System Security Challenges and Examination of Unauthorized Access Issue
10. Paterson, K.G. (2011). Proceedings of the Advances in Cryptology—EUROCRYPT 2011, Springer.10.1007/978-3-642-20465-4 ↗
11. Atluri, V., and Diaz, C. (2011). Proceedings of the Computer Security—ESORICS 2011, Springer.10.1007/978-3-642-23822-2 ↗
12. Secure, efficient and revocable multi-authority access control system in cloud storage10.1016/j.cose.2016.02.002 ↗
13. A dynamic and hierarchical access control for IoT in multi-authority cloud storage10.1016/j.jnca.2020.102633 ↗
14. ACM SIGOPS Operating Systems Review10.1145/775265.775268 ↗
15. Bell, D., and LaPadula, L. (1973). Secure Computer Systems: Mathematical Foundations, Mitre Corp.
16. Sandhu, R., Ferraiolo, D., and Kuhn, R. (2000, January 26–28). The NIST Model for Role-Based Access Control: Towards a Unified Standard. Proceedings of the 5th ACM Workshop on Role-Based Access Control, Berlin, Germany.10.1145/344287.344301 ↗
17. Hu, V.C., Ferraiolo, D., Kuhn, R., Schnitzer, A., Sandlin, K., Miller, R., and Scarfone, K. (2014). Guide to Attribute Based Access Control (ABAC) Definition and Considerations, National Institute of Standards and Technology (NIST). Special Publication 800-162.10.6028/NIST.SP.800-162 ↗
18. Harris, S. (2002). Mike Meyers’ CISSP(R) Certification Passport, McGraw-Hill. [1st ed.].
19. Proposed NIST Standard for Role-Based Access Control10.1145/501978.501980 ↗
20. Jin, X., Krishnan, R., and Sandhu, R. (2012). Data and Applications Security and Privacy XXVI, Springer.
21. Tianyi, Z., Weidong, L., and Jiaxing, S. (2011–2, January 1). An Efficient Role Based Access Control System for Cloud Computing. Proceedings of the 11th International Conference on: Computer and Information Technology (CIT), Washington, DC, USA.10.1109/CIT.2011.36 ↗
22. Adaptive XACML access policies for heterogeneous distributed IoT environments10.1016/j.ins.2020.09.051 ↗
23. Privacy Preservation and Access Control for Sharing Electronic Health Records Using Blockchain Technology10.18267/j.aip.176 ↗
24. Chakraborty, S., and Ray, I. (2006, January 7–9). TrustBAC-Integrating Trust Relationships into the RBAC Model for Access Control in Open Systems. Proceedings of the the ACM Symposium on Access Control Models and Technologies, Lake Tahoe, CA, USA.10.1145/1133058.1133067 ↗
25. Shoup, V. (2005). Proceedings of the Advances in Cryptology—CRYPTO 2005, Springer.10.1007/11535218 ↗