Toggle Main Menu Toggle Search

Open Access padlockePrints

Compliance Checking of Cloud Providers: Design and Implementation

Lookup NU author(s): Dr Masoud Barati, Kwabena Adu-Duodu, Dr Gagangeet Aujla, Professor Raj Ranjan

Downloads

Full text for this publication is not currently held within this repository. Alternative links are provided below where available.


Abstract

© 2023 Copyright held by the owner/author(s). Publication rights licensed to ACM. The recognition of capabilities supplied by cloud systems is presently growing. Collecting or sharing healthcare data and sensitive information especially during the Covid-19 pandemic has motivated organizations and enterprises to leverage the upsides coming from cloud-based applications. However, the privacy of electronic data in such applications remains a significant challenge for cloud vendors to adapt their solutions with existing privacy legislation standards such as general data protection regulation (GDPR). This article first proposes a formal model and verification for data usage requests of providers in a cloud composite service using a model checking tool. A cloud pharmacy scenario is presented to illustrate the connectivity of providers in the composite service and the stream of their requests for both collection and movement of patient data. A set of verifications is then undertaken over the pharmacy service in accordance with three significant GDPR obligations, namely user consent, data access, and data transfer. Following that, the article designs and implements a cloud container virtualization based on the verified formal model realizing GDPR requirements. The container makes use of some enforcement smart contracts to only proceed with the providers’ requests that are compliant with GDPR. Finally, several experiments are provided to investigate the performance of our approach in terms of time, memory, and cost.


Publication metadata

Author(s): Barati M, Adu-Duodu K, Rana O, Aujla GS, Ranjan R

Publication type: Article

Publication status: Published

Journal: Distributed Ledger Technologies: Research and Practice

Year: 2023

Volume: 2

Issue: 2

Online publication date: 08/06/2023

Acceptance date: 13/02/2023

ISSN (electronic): 2769-6480

Publisher: Association for Computing Machinery

URL: https://doi.org/10.1145/3585538

DOI: 10.1145/3585538


Altmetrics

Altmetrics provided by Altmetric


Share