Privacy of cloud data using a secure SSO architecture

Cloud computing is recently considered as one of the most important distributed computing models in information technology industry. With all the facilities and promising benefits of services offered by the cloud computing, there are still some challenges with regard to the application of cloud computing such as data security, misuse of cloud services, member insider (domestic employee) and malicious cyber-attacks. Various techniques can be used in cloud computing for the security and preservation of privacy. Encryption, access control based on authentication for increasing confidentiality and privacy of information, and prevention of unauthorized access are of fair methods in this system. In the meantime, access control is one of the fundamental requirements due to prevent unauthorized access to systems and preserve assets of the organizations. In this paper, an improved method for providing security, transferring, and recovering of data stored in cloud has been presented. Furthermore, an efficient token security based Cloud Single Sign-On Architecture (CSSOA) architecture model is represented to access control for cloud computing (AC3). The new proposed CSSOA has been implemented using Service-Oriented Architecture (SOA) and its security is evaluated in AVISPA's environment.