{"id":"https://openalex.org/W2564835063","doi":"https://doi.org/10.1109/tifs.2016.2646639","title":"A Cross Tenant Access Control (CTAC) Model for Cloud Computing: Formal Specification and Verification","display_name":"A Cross Tenant Access Control (CTAC) Model for Cloud Computing: Formal Specification and Verification","publication_year":2016,"publication_date":"2016-12-29","ids":{"openalex":"https://openalex.org/W2564835063","doi":"https://doi.org/10.1109/tifs.2016.2646639","mag":"2564835063"},"language":"en","primary_location":{"id":"doi:10.1109/tifs.2016.2646639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2016.2646639","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022101527","display_name":"Quratulain Alam","orcid":null},"institutions":[{"id":"https://openalex.org/I4210127363","display_name":"Institute of Management Sciences Peshawar","ror":"https://ror.org/02m8e1r74","country_code":"PK","type":"education","lineage":["https://openalex.org/I4210127363"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Quratulain Alam","raw_affiliation_strings":["Department of Computer Sciences, Institute of Management Sciences, Peshawar, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, Institute of Management Sciences, Peshawar, Pakistan","institution_ids":["https://openalex.org/I4210127363"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081150177","display_name":"Saif Ur Rehman Malik","orcid":"https://orcid.org/0000-0001-8195-1630"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Saif U. R. Malik","raw_affiliation_strings":["Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035884247","display_name":"Adnan Akhunzada","orcid":"https://orcid.org/0000-0001-8370-9290"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Adnan Akhunzada","raw_affiliation_strings":["Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0000-0001-8370-9290","affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security, The University of Texas at San Antonio, San Antonio, TX, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security, The University of Texas at San Antonio, San Antonio, TX, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069325708","display_name":"Saher Tabbasum","orcid":null},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Saher Tabbasum","raw_affiliation_strings":["Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101533532","display_name":"Masoom Alam","orcid":"https://orcid.org/0000-0001-8839-593X"},"institutions":[{"id":"https://openalex.org/I16076960","display_name":"COMSATS University Islamabad","ror":"https://ror.org/00nqqvk19","country_code":"PK","type":"education","lineage":["https://openalex.org/I16076960"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Masoom Alam","raw_affiliation_strings":["Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, COMSATS Institute of Information Technology, Islamabad, Pakistan","institution_ids":["https://openalex.org/I16076960"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.508,"has_fulltext":false,"cited_by_count":49,"citation_normalized_percentile":{"value":0.97307263,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"12","issue":"6","first_page":"1259","last_page":"1268"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.8582895994186401},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8507899045944214},{"id":"https://openalex.org/keywords/revocation","display_name":"Revocation","score":0.7482808232307434},{"id":"https://openalex.org/keywords/shared-resource","display_name":"Shared resource","score":0.6694751977920532},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.6559485793113708},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6533831357955933},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6414947509765625},{"id":"https://openalex.org/keywords/delegation","display_name":"Delegation","score":0.6167629361152649},{"id":"https://openalex.org/keywords/permission","display_name":"Permission","score":0.5437922477722168},{"id":"https://openalex.org/keywords/resource","display_name":"Resource (disambiguation)","score":0.49288153648376465},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4596002697944641},{"id":"https://openalex.org/keywords/multitenancy","display_name":"Multitenancy","score":0.4543326497077942},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.41728144884109497},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3261224329471588},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.2480432689189911},{"id":"https://openalex.org/keywords/software-as-a-service","display_name":"Software as a service","score":0.21943843364715576},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.13244470953941345},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.10856151580810547},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.10250735282897949},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.07650569081306458}],"concepts":[{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.8582895994186401},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8507899045944214},{"id":"https://openalex.org/C2775892892","wikidata":"https://www.wikidata.org/wiki/Q6509517","display_name":"Revocation","level":3,"score":0.7482808232307434},{"id":"https://openalex.org/C51332947","wikidata":"https://www.wikidata.org/wiki/Q1172305","display_name":"Shared resource","level":2,"score":0.6694751977920532},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.6559485793113708},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6533831357955933},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6414947509765625},{"id":"https://openalex.org/C86532276","wikidata":"https://www.wikidata.org/wiki/Q1184065","display_name":"Delegation","level":2,"score":0.6167629361152649},{"id":"https://openalex.org/C2779089604","wikidata":"https://www.wikidata.org/wiki/Q7169333","display_name":"Permission","level":2,"score":0.5437922477722168},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.49288153648376465},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4596002697944641},{"id":"https://openalex.org/C69016650","wikidata":"https://www.wikidata.org/wiki/Q1364211","display_name":"Multitenancy","level":5,"score":0.4543326497077942},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.41728144884109497},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3261224329471588},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2480432689189911},{"id":"https://openalex.org/C175133352","wikidata":"https://www.wikidata.org/wiki/Q1254596","display_name":"Software as a service","level":4,"score":0.21943843364715576},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.13244470953941345},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.10856151580810547},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.10250735282897949},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.07650569081306458},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C529173508","wikidata":"https://www.wikidata.org/wiki/Q638608","display_name":"Software development","level":3,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tifs.2016.2646639","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tifs.2016.2646639","pdf_url":null,"source":{"id":"https://openalex.org/S61310614","display_name":"IEEE Transactions on Information Forensics and Security","issn_l":"1556-6013","issn":["1556-6013","1556-6021"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Information Forensics and Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":22,"referenced_works":["https://openalex.org/W1723222257","https://openalex.org/W1775468415","https://openalex.org/W1919529895","https://openalex.org/W1996109622","https://openalex.org/W2091968063","https://openalex.org/W2093355488","https://openalex.org/W2121485167","https://openalex.org/W2137351629","https://openalex.org/W2153070627","https://openalex.org/W2183926967","https://openalex.org/W2184498111","https://openalex.org/W2208337993","https://openalex.org/W2217570753","https://openalex.org/W2346418387","https://openalex.org/W2405356014","https://openalex.org/W2465113299","https://openalex.org/W2466176058","https://openalex.org/W2524145143","https://openalex.org/W2933795154","https://openalex.org/W3022002489","https://openalex.org/W4246691913","https://openalex.org/W6688017131"],"related_works":["https://openalex.org/W2390461322","https://openalex.org/W1683803069","https://openalex.org/W2541816218","https://openalex.org/W2399629598","https://openalex.org/W2383342098","https://openalex.org/W2356875817","https://openalex.org/W2383627585","https://openalex.org/W2397312625","https://openalex.org/W1573411099","https://openalex.org/W2362476748"],"abstract_inverted_index":{"Sharing":[0],"of":[1,66,89,98,131,142],"resources":[2,132],"on":[3,9],"the":[4,22,36,64,78,87,129,143],"cloud":[5,25,37,53,59,92],"can":[6,133],"be":[7,134],"achieved":[8],"a":[10,52],"large":[11],"scale,":[12],"since":[13],"it":[14],"is":[15,118],"cost":[16],"effective":[17],"and":[18,101,115,137],"location":[19],"independent.":[20],"Despite":[21],"hype":[23],"surrounding":[24],"computing,":[26],"organizations":[27],"are":[28],"still":[29],"reluctant":[30],"to":[31,41],"deploy":[32],"their":[33],"businesses":[34],"in":[35,43,86],"computing":[38],"environment":[39],"due":[40],"concerns":[42],"secure":[44],"resource":[45,54,79,93],"sharing.":[46],"In":[47],"this":[48],"paper,":[49],"we":[50],"propose":[51],"mediation":[55,94],"service":[56,60],"offered":[57],"by":[58],"providers,":[61],"which":[62],"plays":[63],"role":[65],"trusted":[67],"third":[68],"party":[69],"among":[70,104],"its":[71],"different":[72,84,105,140],"tenants.":[73],"This":[74],"paper":[75],"formally":[76],"specifies":[77],"sharing":[80,130],"mechanism":[81,103],"between":[82],"two":[83],"tenants":[85,106,141],"presence":[88],"our":[90],"proposed":[91],"service.":[95],"The":[96,124],"correctness":[97],"permission":[99],"activation":[100],"delegation":[102],"using":[107,121],"four":[108],"distinct":[109],"algorithms":[110],"(activation,":[111],"delegation,":[112],"forward":[113],"revocation,":[114],"backward":[116],"revocation)":[117],"also":[119],"demonstrated":[120],"formal":[122],"verification.":[123],"performance":[125],"analysis":[126],"suggests":[127],"that":[128],"performed":[135],"securely":[136],"efficiently":[138],"across":[139],"cloud.":[144]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":5},{"year":2020,"cited_by_count":10},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":8}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}