RAISE LabHCMUT, VNU-HCM
← All publications

Conference

ACaaS: Privacy-Preserving Access Control as a Service for Healthcare on the Cloud-Edge Continuum

Son Ha Xuan, Phat T. Tran-Truong, Xuan-Bach Le, Minh B. Nguyen, Thanh Pham

CORE ATo appear
Venue
ICSOC 2026 (Main Track, CORE Rank A, Acceptance Rate: 64/240, 27%)
Location
Lodz, Poland
Date
December 2026
Research area
Applied & Collaborative
Read the paper (PDF)Artifact

Abstract

Enforcing consistent, privacy-aware access control across the healthcare cloud-edge continuum—a core service-composition challenge—is unresolved: centralized enforcement suffers WAN latency and outage fragility, while replicating full authorization engines at every edge exceeds device capabilities and offers no evidence that replicas agree. We propose ACaaS , an Access Control as a Service architecture that decomposes the XACML roles into microservices with typed, partition-tolerant RPC contracts, deploys a lightweight Policy Decision Point at the edge, minimizes records before they leave the device (pseudonymization, k-anonymity, role-driven redaction), and uses a permissioned ledger as a synchronization substrate — not merely an audit log — so that every edge provably enforces the policy version committed by cloud administrators. Five HIPAA/GDPR-derived security goals are discharged semi-formally (a substitution-resistance lemma, five theorems, a knapsack-optimality placement argument, and a closed-form reconciliation bound) and validated by twelve experiments, including an executable conformance suite mechanizing all theorems, a re-identification attack within one percentage point of the analytic 1/k bound, an ablation in which only the ledger detects tampered policy pushes, Byzantine fault injection, and a three-site partition/soak emulation sustaining 100% local availability with zero audit-log loss across 37 WAN partitions. Keywords: Access Control, Cloud-Edge Continuum, Blockchain, Privacy, Microservices, Healthcare

Access ControlCloud-Edge ContinuumBlockchain

Cite this paper

@inproceedings{haxuan2026acaas,
  author    = {Ha Xuan, Son and Tran-Truong, Phat T. and Le, Xuan-Bach and Nguyen, Minh B. and Pham, Thanh},
  title     = {ACaaS: Privacy-Preserving Access Control as a Service for Healthcare on the Cloud-Edge Continuum},
  booktitle = {Proceedings of the 24th International Conference on Service-Oriented Computing (ICSOC 2026)},
  year      = {2026},
  series    = {Lecture Notes in Computer Science},
  publisher = {Springer},
  address   = {Lodz, Poland},
  note      = {Artifact: \url{https://github.com/SonHaXuan/ACaaS}}
}