A User Data Location Control Model for Cloud Services

Kaniz Fatema, Philip Healy, Vincent C. Emeakaroha, John P. Morrison, Theo Lynn

2014

Abstract

A data location control model for Cloud services is presented that uses an authorization system as its core control element. The model is intended for use by enterprises that collect personal data from end users that can potentially be stored and processed at multiple geographic locations. By adhering to the model’s authorization decisions, the enterprise can address end users’ concerns about the location of their data by incorporating their preferences about the location of their personal data into an authorization policy. The model also ensures that the end users have visibility into the location of their data and are informed when the location of their data changes. A prototype of the model has been implemented that provides the data owner with an interface that allows their location preferences to be expressed. These preferences are stored internally as XACML policy documents. Thereafter, movements or remote duplications of the data must be authorized by submitting requests to an ISO/IEC 10181-3:1996 compliant policy enforcement point. End users can, at any time, view up-to-date information on the locations where their data is stored via a web interface. Furthermore, XACML obligations are used to ensure that end users are informed whenever the location of their data changes.

Paper Citation

in Harvard Style

Fatema K., Healy P., C. Emeakaroha V., P. Morrison J. and Lynn T. (2014). A User Data Location Control Model for Cloud Services . In Proceedings of the 4th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER, ISBN 978-989-758-019-2, pages 476-488. DOI: 10.5220/0004855404760488

in Bibtex Style

@conference{closer14,
author={Kaniz Fatema and Philip Healy and Vincent C. Emeakaroha and John P. Morrison and Theo Lynn},
title={A User Data Location Control Model for Cloud Services},
booktitle={Proceedings of the 4th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,},
year={2014},
pages={476-488},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0004855404760488},
isbn={978-989-758-019-2},
}

in EndNote Style

TY - CONF
JO - Proceedings of the 4th International Conference on Cloud Computing and Services Science - Volume 1: CLOSER,
TI - A User Data Location Control Model for Cloud Services
SN - 978-989-758-019-2
AU - Fatema K.
AU - Healy P.
AU - C. Emeakaroha V.
AU - P. Morrison J.
AU - Lynn T.
PY - 2014
SP - 476
EP - 488
DO - 10.5220/0004855404760488