Access control policy synthesis method based on BSset (binary string set)

Abstract

The invention discloses an access control policy synthesis method based on a BSset (binary string set). The method comprises the following steps of: firstly, defining elements of the BSset and a set operation rule based on a BS, performing attribute decomposition on an actual policy from an attribute restraint layer according to the definition, and separating the elements in the set to correctly express the policy with a logic expression based on the BS; then, performing semantic check and displacement fusion to eliminate the problems of rule redundancy and semantic conflicts; defining a logic synthesis operator based on the BSset according to actual security demands on the basis, and converting a synthesis mode into a logic expression; directly computing a synthesis result of a policy space based on binary modeling according to the logic expression through the characteristic of being directly taken as a data structure of the BS, wherein the synthesis result is taken as a policy algebra realization mechanism needing no logic conversion; and finally, translating the synthetic policy based on the BSset into an attribute policy.

Description

technical field [0001] The invention relates to a method for inter-domain authorized security interoperability in a distributed system, in particular, an access control strategy synthesis method based on a binary sequence set (Bsset). Background technique [0002] With the rapid development of large-scale distributed network applications, the cooperation between autonomous domains will become more and more frequent. Among them, inter-domain access control strategy synthesis is a key security element for aggregated resource access in distributed technology. Attribute-based access control can solve fine-grained access control in complex systems, and provides an ideal access control scheme for open distributed environments. And using discrete algebra, complex attribute-based policy synthesis methods can be expressed in a rigorous algebraic system. Algebra-based inter-domain access control policy synthesis methods specifically refer to a class that first analyzes and defines po...

AI Technical Summary

Problems solved by technology

However, although this method solves the conversion cost of logical algebraic symbols, due to the dependence of the strategy tree's own data structure on the Boolean attribute constraints, it will cause redundancy in the merging process and the problem of a large system scale, which also limits this method. Composite Computational Performance of Methods

Images