An Enhanced Symmetric Role-Based Access Control Using Fingerprint Biometrics for Cloud Governace

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

www.seipub.org/pccr

An Enhanced Symmetric Role-Based Access Control Using Fingerprint Biometrics for Cloud Governace Mr. S.Nagaraju1,Dr. Latha Parthiban2,Mr. B.Santhosh Kumar3 Department of Compurter Science1,2, Department of Computer Science and Engineering3 , Central University of Pondicherry1,2, Jawaharlal Nehru Technological University-Anantapur3 Assistant Professor, Department of Computer Science, Pondicherry University Community College, Lawspet, Pondicherry-605 008, India 1,2

Assitant Professor, Dept.of CSE, G.Pulla Reddy Engineering College, Kurnool, Andhra Pradesh-518 007, India

3 *1

saboutnagaraju1983@gmail.com; 2lathaparthiban@yahoo.com; 3santhoshkumar.bala@gmail.com

Abstract The current world is a world of technology and these technologies are moving around each and every person. It is our choice to transform, upgrade and make use of technologies for better improvement and convenience. This is a right time to select the best technologies for out better future. Cloud computing is the future generation computing, which provides storage, computing power, Information and Communication Technology (ICT) as a service for internetbased computing at nominal initial investment. Consumers can concentrate on their quality of service, without worrying about service-oriented problems. The current e-governance information systems can take advantages of cloud computing for delivering efficient and effective core services to the stakeholders. In this paper, a Role-Based Access Control (RBAC) using fingerprint biometrics for cloud governance has been proposed, which makes the governance in cloud more convenient and secure to the consumers. Proposed cloud governance aims to deliver reliable, qualitative, transparent and more economical services to users.

Keywords Cloud Computing; E-Governance; Cyber Security; Internet; RoleBased Access Control; Stakeholders

Service, Platform as a Service and Infrastructure as a Service with three different deployment models based on their data sensitivity, which can improve the processes of the government. With the proposed system, stakeholders can concentrate only on their quality of service rather than service-oriented problems. Cloud governance will lead to be significant in cost saving, empowerment of the stakeholders, increases transparency in services and eliminates layers of governance.

The cloud governance information system provides following conveniences to the government stakeholders: •

Government-to-Citizens Cloud (G2CC): G2C cloud provides online interaction between the government and the private individuals. This is more users friendly and can make use it for highquality Customer Relationship Management (CMR) with the single portal access.

•

Government-to-Business Cloud (G2BC): G2B cloud provides efficient technologies and methodologies to the business sectors. Business cloud also offers more convenient and flexible eservices to the business organizations.

•

Government-to-Employees Cloud (G2EC): G2E cloud can be used as information aid and service system for all government employees. It creates interaction between the government units and their employees.

•

Government-to-Government Cloud (G2GC): G2G cloud provides an interaction between different government organisations, departments,

Introduction The proposed cloud governance information system promises to makes government more trust worthy, responsive, transparent, flexible and legitimate in order to deliver efficient and effective government services to stakeholders. Cloud computing makes Governance easy for stakeholders to access and interact with the government at any time with pay-asyou-go policy. This proposed cloud governance system, allows the stakeholders to access Software as a

11

www.seipub.org/pccr

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

authorities and other governments. This interaction makes boosting services between government stakeholders.

The transformation of the governance into cloud computing has following advantages: High cost of running in-house data centres can be removed.

• Governance can concentrate on agenda and quality of services without bothering about infrastructure scalability and maintenance problems.

• Governance can overcome present and future challenges.

• Security video surveillance stream can be stored on cloud data centres.

• Can provide optimised, virtualized and scalable operational environments.

• High speed bandwidth can be provided to access governance services in milliseconds.

• Can provide flexible platforms to build and bring advanced governance services into public.

• Useful for disaster recovery.

• Governance can be more attractive for providing new schemes.

This paper further divided into three sections.

Background work section, describes why egovernance fail, needs for cloud governance, fingerprint biometric system primitives, nature of Role-Based Access Control (RBAC) and address the similar work taken place. Proposed work section presents the enhanced symmetric RBAC cloud governance. Conlusion section summarizes the proposed system.

Background Work •

Current e-governance in most of the countries is facing lot of issues like failure in delivering an efficient and effective services, lacking finance for upgrading and maintaining infrastructure, engaging citizens, managing staff, forming new partnerships and socioeconomic problems. It is necessary to transform egovernance to cloud computing for handling present and future issues. The proposed cloud governance computing eliminates all these issues and provides more trustable, convenient and best government to the stakeholders.

Why do e-Governance fail The e-governance information system is a creative, innovative and effective development process. In

12

which, only few developed countries are succeeded and many developing countries are not succeeded because of failure in development of e-government projects. According to the United Nations EGovernment Survey 2012, the Republic of Korea is world No.1 in e-governance project development. The top ten developed countries, which have succeeded in e-governance development, are given in table 1.

Where, the E-Governance Development Index (EGDI) value is calculated based on a comparative basis that rates each country relative to all other.

TABLE 1 THE WORLD E-GOVERNACE DEVELOPMENT LEADERS IN 2012 Rank

Country

EGDI Value

1

Republic of Korea

0.9283

2

Netherlands

0.9125

3

United Kingdom

0.8960

4

Denmark

0.8889

5 6

United States France

0.8687 0.8635

7

Sweden

0.8599

8

Norway

0.8593

9

Finland

0.8505

10

Singapore

0.8474

TABLE 2 E-GOVERNANCE DEVELOPMENT IN LEAST DEVELOPED CONTRIES IN 2010 and 2012 Rank

EGDI Value

Country

2012

2010

2012

2010

Samoa

114

115

0.4358

0.3742

Tuvalu

134

N.A

0.3539

N.A

Vanuatu

135

155

0.3512

0.2521

Lesotho

136

121

0.3501

0.3512

Sao Tome and Principe United Rep. of Tanzania Rwanda

138

128

0.3327

0.3258

139

137

0.3311

0.2926

140

148

0.3291

0.2749

Angola

142

132

0.3203

0.3110

Uganda

143

142

0.3185

0.2812

Madagascar

148

139

0.3054

0.2890

The e-governance development rankings and EGDI values of the world’s least ten developing countries in 2010 and 2012 are listed in table 2. Many developing

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

countries are struggling to succed in e-governance development. There are number of factors leading for e-governance projects failure, in which the top ten key factors are listed in table 3.

TABLE 3 FACTORS RANKING FOR PARTIALLY AND FULLY FAILED PROJECTS

Rank 1

Factors for Partially failed Projects Lack of user input

2

Incomplete Requirements

3 4 5

Changing Requirements Lack of Executive support Technology Incomplete

6 7 8 9 10

Lack of Resources Unrealistic Expectations Unclear Objectives Unrealistic Time frame New Technology

Factors for Fully failed Projects Incomplete Requirements Lack of user involvement Lack of resources Unrealistic Expectations Lack of Executive support Changing Requirements Lack of Planning Unrealistic Time frame Lack of IT management Technology illiteracy

Table 4 describes the world e-governance projects failure percentages and some of the reasons. In [9], specified that an overall e-governance projects development failure rate is around 60%. Cisco’s Cloud Watch 2011 report for the U.K (research conducted by loud house in September 2011), where 76% of respondents cited security and privacy as a top barrier to cloud adoption. The NITA E-Government Survey Draft Report 2012 stated that only 14% consumers are satisfied with current e-governance services and 6.8% government organizations are having e-records management policies. As per the United Nations EGovernment Survey 2012 there is a world-wide considerable progress in expansion of e-governance services and only three countries (Central African Republic, Guinea and Libya) do not have a web presence.

Motto of Cloud for e-Governance Cloud computing motto here is to allow e-Governance consumers to build, run and integrate their applications into the cloud and provides sustainable solutions for the changing needs of e-Governance. The obstacles pointed out by the United Nations EGovernment Survey 2012 [8] and NITA E-Government Survey Draft Report 2012 [7] can be overcome with cloud computing. E-Governance stakeholders can integrate their existing in-house infrastructure, applications and information into the cloud with the proposed methodology. The proposed cloud governance provides much needed scalable and

www.seipub.org/pccr

flexible government services to the stakeholders by enabling different types of cloud services and deployment models. Cloud governance dynamically increases the resources needed to maintain quality of service at the times of high load. With the proposed cloud governance, stakeholders can believe the cloud computing in providing security to their applications.

The greatest advantage with cloud is disaster recovery.

The motto of cloud governance can be found from the following Table 5.

TABLE 4 PERCENTAGES OF WORLD E-GOVERNANCE PROJECT FAILURES AND REASONS Projects Failure/Success Rates

Reasons

35 % of e-Government projects are total failures

- Initiatives not implemented

50% of e-Government projects are partial failures

- Main stated goals not achieved

15% of e-Government projects are successes

- All stakeholders benefited - No adverse results

- Initiatives abandoned immediately - Initial success but failure after an year - Success for one group but failure for others

TABLE 5 CURRENT E-GOVERNANCE vs. CLOUD GOVERNANCE Current e-Governance Single channel service Isolated Governments Traditional security Respective Departments Rigid Configuration Corrupted Government Huge Capital Investment & Low Profit

Cloud Governance Multichannel service One-stop Governments RBAC using fingerprint biometrics security Unified Supervision Dynamic Distribution Fully transparent Government Low Investment & Huge Profit

Fingerprint Biometric Security The fingerprint biometric security is the next innovation in the government organizations for providing secure services. The fingerprint security systems can be used in the wide range of applications, systems and technologies for verifying identity. Some of the applications are time and attendance system, ATM, PC, laptop and mobile authentication, Aadhaar cards and voter ID registration. Strongest advantages of fingerprint securities are more convenient, highly secure and provide accountability.

In [5], characteristics, advantages and applications of

13

www.seipub.org/pccr

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

different biometrics systems are given. The limitations of different biometric systems are specified in [3].

Because of the fingerprint biometric accuracy, reliability, scalability, convenience, cost and stability, it is universally accepted for government in any operational environments.

Symmetric Role-Based Access Control Access control is the protection mechanism by which user or group of users can be restricted to certain services and resources. The following are the three methods widely used in access control and described in [2].

1.

Discretionary Access Control (DAC)

2.

Mandatory Access Control (MAC) and

3.

Role-Based Access Control (RBAC)

scalability, extensibility and portability of the government services. The proposed solution considered all these enhancements. The overview of cloud governance system as given in the Figure 1 has consumers, who can access the cloud government services securely using 256-bits Transport Layer Security internet.

256-bits TLS Internet

In the above three approaches, RBAC is an advanced and popular for information security and privacy.

Symmetric role-based access control is the suitable method, for maintaining accurate and appropriate user-role and role-permission assignments. In this paper, the properties of DAC and MAC have been implemented in symmetric RBAC for providing adequate security to the government sensitive information.

The following are some research proposals related to cloud governance: In [4], Jian Liang described the government cloud architecture for providing governance services. Where, the future direction is to provide greater privacy and security. In [6], authors presented an intelligent and energy efficient distributed cloud computing architecture for governance, in which the proposed approach can easily integrate and provide required security. In [1], authors proposed a five stage development model for cloud governance and their future direction is to provide better security.

The Proposed Cloud Governance The proposed cloud governance is an internet-based technology, which provides secure government services to the stakeholders. In government sectors, protecting sensitive information from attackers is a challenging task. Here, it is necessary to consider security as an integral part of the development because internet-oriented services can be easily prone to cyber threats. While implementing solutions to the security threats, there should be a vision for future 14

FIG.1: ARCHITECTURAL OVERVIEW OF THE CLOUD GOVERNANCE

In the proposed approach, the primary step is to make secure channel between consumers and cloud services using transport layer security protocol. Security over the internet can be provided by using any one of the cipher suites given below TLS creates a secure communication using asymmetric cryptographic algorithms (i.e., ECDHE, RSA etc.), symmetric cryptographic algorithms (i.e., AES, CBC, etc.) and hashing algorithms (i.e. SHA512, MD5, etc.). Where, asymmetric algorithms are used for authentication, symmetric algorithms for encryption and hashing

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

algorithms for integrity of the end entities. TLS cipher suites are: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA512_P2 56TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA512_ P384TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SH A512_P521 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA512_P5 21 The authentication process between the users and the cloud services is described in figure 2.

www.seipub.org/pccr

described in figure 3. Consumer’s authorization would be created and evaluated by using proposed enhanced symmetric RBAC, where users or group of users must be legitimate. In this proposed RBAC, different departments of the government are considered as domains. The role of consumers in each domain is categorized with three level tree hierarchies, where top-level users are considered as decision makes, middle-level users are considered as supervisors and bottom-level usersare considered as executors.

Fingerprint Biometric

UA

PA

Authentication server FIG.2: CONSUMERS AUTHENTICATION PROCESS

Before making use of the cloud governance service consumers need to register at the local government offices. Along with identification details, the consumers have to submit personal details such as address proofs, mobile number and most importantly a fingerprint for registration. Both the hands fingerprint has captured using high resolution scanner, and stored in the cloud authentication server for further user authentication. In this approach, a new idea has proposed where the user can select a username and password. The password must include at least one digit, one control character, one letter and one punctuation symbol quite strong. The login credentials selection can be done by using more complicated complementation and authentication functions. After successful login, the user has to submit fingerprint identity. These two identities would be evaluated sequentially at cloud authentication server.

Once the fingerprint matches a unique Resource Allocation Number (RAN) would be generated and sent as SMS to the user’s mobile number, which is given at the time of registration.

After successful validation of RAN, consumer becomes legitimate user and eligible for accessing certain cloud governance services. The authorization process between the legitimate users and services has

FIG.3: CONSUMERS AUTHORIZATION PROCESS USING ENHANCED SYMMETRIC RBAC

The set of operations performed by the consumers is defined as type. In the proposed RBAC, domains ARE stored in Domain-Domain Access Control Table (DDAT) and types are stored in Domain-Type Access Control Table (DTAT). In the proposed RBAC, domains and types strictly associated with user roles.

Information sensitivity labels would be assigned based on the role played by the users. Following are the constraints enforced on users, administrators, their roles and permissions.

• • • • • •

• •

Static Separation-of-Duties (SSD).

Dynamic Separation-of-Duties (DSD) Operational Separation-of-Duties.

History and object-based Separation-of-Duties.

Temporal constraints.

Role-enabling and Role-disabling constraints.

Periodicity-type and Duration-type constraints.

Role-activation and Role-deactivation constraints.

15

www.seipub.org/pccr

Parallel and Cloud Computing Research (PCCR) Volume 1 Issue 2, July 2013

In the proposed RBAC, administrators will take care of assigning roles, permissions and constraints to the consumers. The owner specifies roles, permissions and constraints to the administrator. Work-flow control of the users and resources would be described by the Access Control Lists (ACL’s). For enforcing confidentiality and integrity of the information, Discretionary Access Control (DAC) and Mandatory Access Control (MAC) rules are implemented in the proposed RBAC. Thus, the enhanced symmetric RBAC provides secure cloud governance services to the legitimate users by making use of dual-factor authentication.

Proceedings of the International Journal of Computer Applications,

pp.10-15,

Jan

2011.

http://biometrics.cse.msu.edu/info.html.

Rajkumar Sharma, Priyesh Kanungo, “An Intelligent Cloud Computing Architecture Supporting e-Governance,” in Proceedings of the 17th

nternational Conference on

Automation & Computing, University of Huddersfield, Huddersfield, UK, 10th September 2011, pp.1-5.

The NITA E-Government Survey Draft Report 2012, http://www.nita.go.ug/uploads/NITA-U2012_egovernementsurvey results_Stakeholder 26 Julyfinal.pdf.

United

Nations

E-Government

Survey

2012,

Conclusion

http://unpan1.un.org/intradoc/groups/public/documents/

The enhanced symmetric Role-Based Access Control makes the cloud governance services more secure and reachable to a common man. In this system, the fingerprint biometric is a key factor for authentication.

For fingerprint biometric, the required secure storage space and processing speed can be achieved using cloud computing. An adoption of governance into the cloud can make more convenient, fast, transparent and reliable. Major risk associated with the cloud governance is transformation complexity. This proposed authentication mechanism can be extended for vein fingerprint biometric. The vein fingerprint biometric security is useful in high security applications military applications.

un/unpan048065.pdf.

REFERENCES

Akram aliothman nasr, Galal hasan galal-edeen, “Proposed Development model of e-Government to appropriate cloud computing,” in International Journal of Reviews in Computing, 10th April 2012. Vol. 9, pp.47-53.

David

F.

Ferraiolo,

D.

Richard

Kuhn,

Ramaswamy

Chandramouli, “Role-Based Access Control”, Second Edition, Information security and privacy series.

H. Kang, Y. Han, H. Kim, W. Choi, Y. Chung, “An Empirical Study of Multi-mode Biometric Systems using Face and Fingerprint”, WISA 2003, LNCS 2908, pp.348-354, 2004.10.

Jian Liang, “Government Cloud: Enhancing Efficiency of EGovernment and Providing Better Public Services,” in 2012 International Joint Conference on Service Sciences, pp.261-265.

K

P

Tripathi,

Technologies

16

“A

Comparative

withReference

Study to

of

Biometric

HumanInterface”,

Volker Fusenig, Ayush Sharma, “Security Architecture for Cloud

Networking,”

Computing,

Networking

in

International Conference on and

Communications,

Cloud

Computing and Networking Symposium, 2012, pp.45-49.

Sabout Nagaraju is currently working as assistant professor in Pondicherry University. He graduated from G.Pulla Reddy Engineering College, Kurnool and did his post graduation from NIT, Calicut.

His areas of interest include cloud computing, Design and analysis of algorithms, Cryptography. He is pursuing his Ph.D. from Pondicherry University. He has published 1 international journal.

Dr.Latha Parthiban has obtained her B.E in Electronics and Communication Engineering from University of Madras, M.E. in Computer Science and Engineering from Anna University, Chennai and has obtained her PhD from Pondicherry University. Her experience spans over 19 years in various Engineering colleges and her research interest includes Soft computing, Expert systems, Image Processing and cloud computing. She has published 26 international journals and presented papers in 22 international and national conferences. She has also published a book in the area of computer aided diagnosis.

B.Santhosh Kumar did his B.Tech from Rajeev Gandhi Memorial College Of Engineering and Technology and M.S from Western Kentucky University, USA. He is currently working as an assistant professor in CSE department in G.Pulla Reddy Engineering College, Kurnool. His areas of interests include Cloud Computing, Cryptography and Web Technologies.

He is currently pursuing his Ph.D. from Pondicherry University. He has published 1 international journal.