@inbook{9e8e5450ee134e559e17e40d8ffc452a,
title = "A data location control model for cloud service deployments",
abstract = "A data location control model for Cloud services is presented. The model is intended for use by Cloud SaaS providers that collect personal data that can potentially be stored and processed at multiple geographic locations. It incorporates users{\textquoteright} location preferences into authorization decisions by converting them into XACML policies that are consulted before data transfer operations. The model also ensures that the users have visibility into the location of their data and are informed when the location of their data changes. A prototype of the model has been implemented and was used to perform validation tests in various Cloud setups. These scenarios serve to demonstrate how location control can be integrated on top of existing public and private Cloud platforms. A sketch is also provided of an architecture that embeds location control functionality directly into the OpenStack Cloud platform. We further propose an enhancement to the model that alters its behaviour from being restrictive to prescriptive so that Cloud providers can copy data to a non-preferred locations in case of emergency. Under this approach, the number of authorized vs unauthorized transfers can be made publicly available by the provider as an assurance measure for consumers.",
keywords = "Access control, Authorization system, Cloud computing, Data location, XACML",
author = "Kaniz Fatema and Healy, \{Philip D.\} and Emeakaroha, \{Vincent C.\} and Morrison, \{John P.\} and Theo Lynn",
note = "Publisher Copyright: {\textcopyright} Springer International Publishing Switzerland 2015.; International Conference in Cloud Computing and Services Sciences, CLOSER 2014 ; Conference date: 03-04-2014 Through 05-04-2014",
year = "2015",
doi = "10.1007/978-3-319-25414-2\_8",
language = "English",
isbn = "9783319254135",
series = "Communications in Computer and Information Science",
publisher = "Springer Verlag",
pages = "117--133",
editor = "Markus Helfert and Fr{\'e}d{\'e}ric Desprez and Donald Ferguson and Frank Leymann and Mu{\~n}oz, \{V{\'i}ctor M{\'e}ndez\}",
booktitle = "Cloud Computing and Services Sciences - International Conference in Cloud Computing and Services Sciences, CLOSER 2014, Revised Selected Papers",
address = "Germany",
}