Auxilia, M.Raja, K.Kannan, K.2019-04-062019-04-062019-029789550481255http://www.erepo.lib.uwu.ac.lk/bitstream/handle/123456789/126/87.pdf?sequence=1&isAllowed=ySecurity plays a key role in any business organization for the purpose of information sharing and privacy. However, there is a lack of privacy and safety among the information. Business data and organizational data are considered to be the highly sensitive data because of the impact that may result in the business process. The employees of any organization are the real assets for their concern and it’s the responsibility of the organization should have a clear vision about the activity of all the employees under legal business development. In this article, new RBAC (Role Based Access Control) framework is developed to navigate the process for a particular employee and their services in any business organization. RBAC framework is especially developed to provide security based on role provisioning during information sharing. AgZKPk (Aggregate Zero Knowledge Proof knowledge) and OCBE (Oblivious Commitment Based Envelope) Protocols are used for role enrollment for RBAC concept (condition policies). In this paper, C-RBAC (Cloud– Role Based Access Control) framework is proposed which can fit in any business organization application. In this C-RBAC, PEP (Policy Enforcement Point) is used to avoid unwanted information sharing with the neighbouring employee or peers. The analysis is done based on the security level for several security algorithms in C-RBAC framework. C-RBAC framework with RSA provide well security based on number of employee with the data handled by the particular employee than the existing RBAC framework with AES (Asymmetric Encryption Standard) and RSA (Rivest–Shamir–Adleman) in terms of number of information they can handle per user. Our analysis revels few threats that arise due to sharing of data and violation in agreements. Also, it is inferred that by adopting our proposed framework, we can avoid data leaks and can protect the data even within the organization.enComputer ScienceInformation ScienceComputing and Information ScienceOther