Automated Trust Negotiation for Cloud Applications in Identity-as-a-Service

In recent years, enterprise applications migrate from a local hosting to a Software-as-a-Service Cloud provider and provide themselves as Cloud services. They may adapt their security infrastructures to a target Cloud provider and may establish a business-to-business relationship with each other manually. Migration of existing applications from a local hosting to a Cloud provider requires substantial adaptation effort in individual architectural components. Existing work has focused on migrating application components with functional and nonfunctional aspects. However, none of them has focused so far on the adaptation of the required security infrastructure. In our previous work, we proposed to decouple the Authentication and Authorisation Infrastructure (AAI) from the business logic of the application as a manageable resource for Cloud providers to control its life cycle. In this paper, we present a novel trust model that enables a dynamic trust relationship between Cloud services. Also, we demonstrate the complete life cycle of the security infrastructure from the development to the migration across multiple Cloud providers. We evaluate the following aspects of Cloud migration: First, the trust relationship is adapted and preserved during the migration. Second, the security infrastructure is portable across Cloud providers as well as interoperable with the protected web service.