Secure Cloud-Mediator Architecture for Mobile-Government using RBAC and DUKPT

Abstract

Smart mobile devices and cloud computing are widely used today. While mobile and portable devices have different capabilities, architectures, operating systems, and communication channels than one another, government data are distributed over heterogeneous systems. This paper proposes a 3-tier mediation framework providing single application to manage all governmental services. The framework is based on private cloud computing for adapting the content of Mobile-Government (M-Government) services using Role-Based Access Control (RBAC) and Derive Unique Key Per Transaction (DUKPT). The 3-layers in the framework are: presence, integration, and homogenization. The presence layer is responsible for adapting the content with regard to four contexts: device, personal, location, and connectivity contexts. The integration layer, which is hosted in a private cloud server, is responsible for integrating heterogeneous data sources. The homogenization layer is responsible for converting data into XML format. The flexibility of the mediation and XML provides an adaptive environment to stream data based on the capabilities of the device that sends the query to the system.