Designing identity access mechanism for broker-based cross-cloud federation system

Abstract

Cloud computing ecosystem is one of the trends currently being discussed in the domain of information technology and computing. Computing ecosystem allows smart usage of technology which means unneeded resources are saved such as power, computing resources, spaces for datacenters as well as saving huge amount of CO2 and electric circuit boards and machines. Cloud federation and its underlying techniques, is considered role model in sharing and expanding cloud business to provide better and cheaper services for end-users. In this thesis, we will survey and compare existing Identity Access Management (IAM) mechanisms and select the IAM best suiting the cloud federation scenario. Our contribution is mainly survey-based where we have compared and selected the best IAM, and design-based in terms of proposing and designing new module: Trust Establishment, Management and Continuous Monitoring “TEMCM" to allow scalable, secure and efficient access control in Broker-Based Cross- Cloud Federation Manager “BBCCFM”, one of the most developed Cloud Federation architecture found in literature. TEMCM will enforce trust management and continuous monitoring which are currently missing in the selected IAM models.