A Privacy-Preserving Cloud Data Security Framework with Advanced Encryption and Role-Based Access Control

Abstract

The growing use of cloud computing has greatly changed how data is stored and managed. However, this has led to new problems in data security and privacy. Existing cloud security frameworks offer little protection against complex cyber threats, especially in multi-tenant cloud systems, where data from different organizations can be stored in the same system. This problem, combined with insufficient advanced data protection structures and mechanisms for fine-grained access control, stresses the need for the development of new data protection systems. This paper examines several issues regarding the protection of data stored in the cloud, such as inadequate control of encryption keys, insufficient fine-grained access, the exposure of data to replay and man-in-the-middle attacks, performance problems due to high encryption efforts, and difficulties in the fulfillment of data protection regulations, such as the GDPR and HIPAA, in the cloud. This paper proposes a new protection system for the cloud, designed to secure data and maintain users’ privacy. The system combines a hybrid approach of the Advanced Encryption Standard, 256 (AES-256) and Rivest, Shamir, and Adelman (RSA-2048) encryption with a flexible Role-Based Access Control (RBAC). The system uses the intrusion detection system, Attribute-Based Encryption (ABE), and a hierarchical control of encryption keys. We have implemented the system and evaluated its performance on the cloud computing platform, Amazon Web Services (AWS), using test data of different sensitivity. In terms of data confidentiality, SPCDPA was found to be 98.7% accurate, with baseline systems reporting 94.3% more cases of data breaches. SPCDPA achieved a data encryption speed of 2.4 GB/s with a latency increase of only 12.3 ms. The system maintained a 1.2% false positive rate for intrusion detection and sustained performance for up to 10,000 users at a time. SPCDPA is highly scalable, secure, and comprehensive. The SPCDPA framework is a highly advanced data protection solution. The SPCDPA framework is a highly advanced data protection solution for cloud computing. The SPCDPA framework is also mathematically sound and provides a highly secure, practical, and highly deployable solution for protection cloud computing data. SPCDPA addresses the most current problems with security systems in cloud computing.