Single Sign-on Access Control System Based on Kerberos in Cloud Federation

نویسندگان
Mohammad Baharloo 1
Mehdi Aafsharmanesh 2
Sarallah Keshavarz Lelkami 3
1 School of Electrical and Computer Engineering, University of Tehran, Tehran, Iran
2 Faculty of Computer Engineering, Pooyesh Institute of higher education, Qom, Iran
3 Faculty of Computer Engineering, Qazvin branch, Islamic Azad University, Qazvin, Iran
چکیده
 Cloud computing is designed to revolutionize resource and service management. This technology is constantly evolving by providing attractive solutions and services to businesses and consumers. Cloud computing is a
promising paradigm for delivering computing as services. Cloud computing providers have a lot of distributed resources around the world, however, sometimes these resources are not enough to satisfy customers, so a concept
called the cloud federation has been developed to extend this technology. The cloud federation gives providers the opportunity to share their resources to meet customer demands that a single cloud could not meet those demands on its own. One of the important issues that exist in a federation environment is managing users and authenticating them in the cloud federation. In this article, we focus on controlling access to resources in a cloud federation. The proposed solution is a single sign-on system based on the Kerberos authentication protocol. The evaluations using the cloud sim simulator show that in the proposed method the access time to the shared cloud resources in different scenarios is limited. Also, in the proposed approach, the elasticity of cloud resources has not significantly affected the access time to resources. Hence, the overhead due to the proposed security mechanism in the cloud federation is tolerable. 

کلیدواژه‌ها

علوم رایانش و فناوری اطلاعات
دوره 16، شماره 1
بهار و تابستان
بهار 1397