Fine-Grained Two-Factor Access Control for Web-Based Cloud Computing Services

Abstract

This research investigates the limitations of existing two-factor authentication (2FA) in securing web-based cloud services and proposes a novel fine-grained framework. The framework aims to improve security by granting granular access control based on user roles, resource sensitivity, and context. The methodology involves designing and implementing a prototype system that integrates context-aware authentication with attribute-based access control. Results demonstrate enhanced security and flexibility compared to traditional 2FA approaches, minimizing the risk of unauthorized access while accommodating diverse user needs and service configurations.

Introduction

Cloud computing offers scalability and cost-effectiveness but introduces significant security concerns. Traditional 2FA methods, while providing a second layer of security, often lack granular control over access to specific resources within a cloud environment. This limits their effectiveness in mitigating sophisticated threats and insider attacks. The challenge lies in developing a system that balances strong security with usability and manageability, offering fine-grained access control without overly complex user experiences. This research addresses this gap by exploring a context-aware, attribute-based access control system integrated with 2FA.

Objectives

• Develop a fine-grained 2FA framework for web-based cloud services.
• Implement a prototype system integrating context-awareness and attribute-based access control.
• Evaluate the security and performance of the proposed framework.