SECURE MANAGEMENT OF ENCRYPTED CLOUD DATA USING ROLE-BASED ACCESS CONTROL

Abstract

For the sake of the confidentiality, availability, and integrity of sensitive information in today's digital environment, secure storage and limited file access are essential. This project proposes the development of a secure file storage system using advanced encryption and role-based access control (RBAC). This solution will provide data protection and limited access. Access to certain resources inside the system is limited to authorized users with defined roles, such Admin, Manager, or Employee, therefore ensuring the safe upload, storage, and retrieval of data online. To safeguard data at rest and avert illegal access without the requisite decryption key, we encrypt all files uploaded to the system using the Advanced Encryption Standard (AES-256). To augment data security, the system communicates information using encrypted HTTPS connections. Role-based access follows the concept of least privilege by granting users just the rights need for their responsibilities. An administrative interface facilitates comprehensive monitoring and control of system use, allowing for the administration of user accounts, role assignments, and audit logs. Timestamps are assigned to all activity, such as logins, file uploads, downloads, and sharing, to improve accountability and traceability. Organizations aiming to protect sensitive data while ensuring operational flexibility and compliance with security standards can employ this system, which combines strong encryption with exact access control, to meet the increasing demand for secure file management solutions in corporate and personal settings.