Attribute-Based Access Control Frameworks for Granular Data Access in Cloud-Based Insurance Systems
Keywords:
Attribute-Based Access Control (ABAC), granular data accessAbstract
Cloud security needs insurance. New insurance systems require dynamic, granular access control, not RBAC/MAC. Humans, objects, circumstances, and contexts make ABAC flexible for HIPAA and GDPR data processing.
Policies control ABAC cloud insurance. Insurance companies confront multi-tenant cloud data security issues. Maintain high standards, prevent internal dangers, and improve access without affecting performance.
References
M. D. Dikaiakos, D. Katsaros, P. Mehra, and Y. P. Manolopoulos, "Cloud computing: Distributed internet computing for IT and scientific research," IEEE Internet Computing, vol. 13, no. 5, pp. 10-13, Sept.-Oct. 2009.
E. Bertino, E. Sandhu, and D. Ferraiolo, "The role of access control in cloud computing," IEEE Transactions on Cloud Computing, vol. 6, no. 2, pp. 387-399, Apr.-June 2018.
R. Sandhu and P. Samarati, "Access control: Principle and practice," IEEE Communications Magazine, vol. 32, no. 3, pp. 40-48, Mar. 1994.
M. B. Othman, B. S. Ali, and R. F. Safavi, "A survey of attribute-based access control models for cloud computing," IEEE Access, vol. 8, pp. 107073-107088, 2020.
Z. M. Ali and R. E. V. Cox, "A systematic review of the role of privacy in the healthcare sector and its integration with cloud computing," IEEE Access, vol. 8, pp. 147432-147445, 2020.
S. L. Menezes, J. L. Franco, and J. J. S. Oliveira, "Efficient implementation of Attribute-Based Access Control (ABAC) for cloud applications," IEEE Transactions on Cloud Computing, vol. 8, no. 3, pp. 735-748, July-Sept. 2020.
E. G. Ardagna, M. A. Nascimento, and V. K. Prakash, "Cloud computing and regulatory compliance," IEEE Security & Privacy, vol. 9, no. 4, pp. 16-24, July-Aug. 2011.
W. S. Liu, L. J. S. Tan, and F. Wang, "Privacy-preserving attribute-based access control in cloud computing," IEEE Transactions on Cloud Computing, vol. 4, no. 1, pp. 86-96, Jan.-March 2016.
K. G. Shashidhar and K. R. Kumar, "A review on cloud security and its regulatory challenges in the health domain," IEEE Transactions on Cloud Computing, vol. 7, no. 2, pp. 325-338, Apr.-June 2019.
G. Grasso and M. D. Santis, "GDPR compliant attribute-based access control policies for cloud computing environments," IEEE Transactions on Cloud Computing, vol. 8, no. 4, pp. 1130-1139, Oct.-Dec. 2020.
E. Bertino and C. Sandhu, "Role-based access control: A historical overview," IEEE Security & Privacy, vol. 8, no. 5, pp. 19-28, Sept.-Oct. 2010.
B. D. M. Gagliardi and R. D. T. Riaz, "Designing ABAC systems for cloud-based applications," IEEE Cloud Computing, vol. 7, no. 3, pp. 40-47, May-June 2020.
P. S. D. Abadi and M. T. Z. Kumar, "Integrating ABAC with cloud-native services for enhanced security," IEEE Access, vol. 9, pp. 87654-87667, 2021.
M. A. Galvan, R. G. Franco, and V. M. Kumar, "Performance and scalability analysis of ABAC models in cloud computing," IEEE Transactions on Cloud Computing, vol. 8, no. 2, pp. 539-547, Apr.-June 2019.
K. T. Xu and P. Y. Zeng, "Attribute-based encryption with policy enforcement for secure access control in cloud," IEEE Transactions on Information Forensics and Security, vol. 13, no. 6, pp. 1484-1495, June 2018.
T. Z. Wang and H. M. Li, "Adaptive and context-aware access control models in cloud computing," IEEE Transactions on Cloud Computing, vol. 6, no. 1, pp. 76-85, Jan.-March 2018.
S. M. Shah, M. M. Z. Raza, and S. J. Jamil, "Data privacy and security challenges in cloud-based insurance systems," IEEE Transactions on Network and Service Management, vol. 17, no. 3, pp. 1321-1330, Sept. 2020.
L. M. Patel and C. S. Dhakal, "ABAC policies for GDPR compliance in healthcare systems," IEEE Transactions on Information Privacy and Security, vol. 15, no. 4, pp. 370-383, Oct.-Dec. 2019.
M. S. Raghavan, H. S. Ray, and P. G. Shah, "A detailed survey on machine learning for adaptive access control," IEEE Access, vol. 8, pp. 141573-141589, 2020.
K. R. Ahrens, "Standardization of ABAC policies in cloud environments for financial sectors," IEEE Cloud Computing, vol. 9, no. 2, pp. 53-61, Apr.-June 2021.
Downloads
Published
Issue
Section
License
This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
