Integration Scheme of Authentication and Authorization for Big Data Based on Role

doi:10.3969/j.issn.1671-1122.2017.11.009

Abstract

Abstract:

Secure authentication and authorization are the foundation to ensure the security of big data. In this paper, we analyze the security problems of big data environment from the perspective of authentication and authorization, combine the authentication scheme based on Kerberos and the access control scheme based on the XACML framework, and design an integration scheme of authentication and authorization for big data based on role. This scheme is also verified in a specific environment. Experimental results show that the proposed scheme can realize the remote authentication and role based authorization for a big data platform and fulfill the secure needs of authentication and authorization for a big data platform.

Key words: big data, authentication, access control, role

CLC Number:

TP309.1

Haolin ZHUANG, Tao SHANG, Jianwei LIU. Integration Scheme of Authentication and Authorization for Big Data Based on Role[J]. Netinfo Security, 2017, 17(11): 55-61.

Figures/Tables 16

References 11

[1]	ZOMAYA A Y, SAKR S.Handbook of Big Data Technologies [M]. Switzerland: Springer International Publishing, 2017.
[2]	刘鸿霞,李建清,张锐卿. 立体动态的大数据安全防护体系架构研究[J]. 信息网络安全,2016(9):18-25.
[3]	Kohl J T, Neuman B C.The Kerberos Network Authentication Service (v5)[J]. Network, 2004, 7(3):167.
[4]	LAFUENTE G.The Big Data Security Challenge[J]. Network Security, 2015(1):12-14.
[5]	范渊. 大数据安全与隐私保护态势[J]. 中兴通讯技术,2016,22(2):53-56.
[6]	罗霄峰,王文贤,罗万伯. 访问控制技术现状及展望[J]. 信息网络安全,2016(12):19-27.
[7]	BERTINO E, CATANIA B, FERRARI E, et al. A System to Specify and Manage Multipolicy Access Control Models[EB/OL]., 2002-6-5.
[8]	张晔,尚进,蒋东毅. 云数据中心网络安全服务架构的研究与实践[J]. 信息网络安全,2016(9):98-103.
[9]	SANDHU R, MUNAWER Q. How to do discretionary access control using roles[EB/OL]., 1998-10-22.
[10]	杨柳,危韧勇,陈传波,等. 一种扩展型基于角色权限管理模型(E-RBAC)的研究[J]. 计算机工程与科学,2006,28(9):126-128.
[11]	朱劭. Hadoop云计算平台核心技术的安全机制缺陷研究[D]. 北京:北京邮电大学,2013.

[1]	Yifeng DU, Yuanbo GUO. A Dynamic Access Control Method for Fog Computing Based on Trust Value [J]. Netinfo Security, 2020, 20(4): 65-72.
[2]	Xiaofen LIU, Xiaofeng CHEN, Guiren LIAN, Song LIN. Authenticated Multiparty Quantum Secret Sharing Protocol with d-level Single Particle [J]. Netinfo Security, 2020, 20(3): 51-55.
[3]	Peng LIU, Qian HE, Wangyang LIU, Xu CHENG. CP-ABE Scheme Supporting Attribute Revocation and Outsourcing Decryption [J]. Netinfo Security, 2020, 20(3): 90-97.
[4]	Zhaoxuan JI, Zhi YANG, Yu SUN, Yiwei SHAN. GPU High Speed Implementation of SHA1 in Big Data Environment [J]. Netinfo Security, 2020, 20(2): 75-82.
[5]	Lu YU, Senlin LUO. A Method of Internal Intrusion Detection of Database in RBAC Mode [J]. Netinfo Security, 2020, 20(2): 83-90.
[6]	Lin HOU, Da FENG, Pengkai XUAN, Fucai ZHOU. Outsourcing Database Join Query Verification Scheme Based on Authentication Tree [J]. Netinfo Security, 2020, 20(2): 91-97.
[7]	Shengwei XU, Feijie WANG. Attribute-based Encryption Scheme Traced Under Multi-authority [J]. Netinfo Security, 2020, 20(1): 33-39.
[8]	Die HU, Dongtang MA, Ming GONG, Zhao MA. A Physical Layer Security Authentication Method Based on PUF [J]. Netinfo Security, 2020, 20(1): 61-66.
[9]	Yongheng XIE, Yubo FENG, Qingfeng DONG, Mei WANG. Research on Data Ingestion Method Based on Deep Learning [J]. Netinfo Security, 2019, 19(9): 36-40.
[10]	Jinmiao WANG, Guowei WANG, Mei WANG, Ruijin ZHU. Achieving Privacy Preserving and Flexible Access Control in Fog Computing [J]. Netinfo Security, 2019, 19(9): 41-45.
[11]	Fuyou ZHANG, Qiongxiao WANG, Li SONG. Research on Unified Identity Authentication System Based on Biometrics [J]. Netinfo Security, 2019, 19(9): 86-90.
[12]	A-yong YE, Junlin JIN, Lingyu MENG, Ziwen ZHAO. Research on Access Control for Privacy Protection of Mobile Terminals [J]. Netinfo Security, 2019, 19(8): 51-60.
[13]	Zhongyuan QIN, Yin HAN, Qunfang ZHANG, Xuejin ZHU. An Improved Scheme of Multi-PKG Cloud Storage Access Control [J]. Netinfo Security, 2019, 19(6): 11-18.
[14]	Baoyuan KANG, Mingming XIE, Lin SI. Research on a Biometrics-based Multi-cloud Server Authentication Scheme [J]. Netinfo Security, 2019, 19(6): 45-52.
[15]	Yi WEN, Xingshu CHEN, Xuemei ZENG, Yonggang LUO. DNS Protocol Restore System for Security Analysis Based on Large-scale Network [J]. Netinfo Security, 2019, 19(5): 77-83.