A multi-mode access control policy formulation and execution method in cloud environment

Abstract

The invention discloses a multi-mode access control strategy making and executing method under a cloud environment. According to the data access characteristics in different areas under the cloud environment, and the optimal access control method is selected. By defining an access strategy description language, the making and using rule of access strategies is restrained in a unified mode, and therefore an IBAC, an ABAC and a DABAC work cooperatively, and a data safety guarantee under the cloud environment is achieved. The IBAC is used in a secret area to achieve access control of fine grit, the ABAC is used in a group area so that efficient and expansible access control, a dynamic attribute concept is led in on the basis of existing attribute access control, the access strategies are expressed through a multi-branch-tree structure, a dynamic attribute access control strategy capable of supporting dynamic authorization is designed, and therefore the self-adaption requirement of public area access control can be met.

Description

technical field [0001] The invention belongs to the technical field of computer storage, and mainly relates to a multi-mode access control policy formulation and execution method in a cloud environment. Background technique [0002] Compared with the traditional storage environment, the cloud storage environment has the characteristics of polymorphism, complexity and dynamics. Polymorphism is mainly manifested in the wide dispersion of user groups, large differences in background levels, low mutual viscosity and diversification and diversity of needs; complexity is mainly manifested in the fact that users have different characteristic information in different scenarios, and The user's feature information is often unpredictable, so the user's permissions should be different in different scenarios; the dynamics is mainly manifested in the fact that the user's feature information is usually time-sensitive, and may be changed in different time periods. Completely different feat...

AI Technical Summary

Problems solved by technology

[0004] Aiming at the above defects or improvement needs of the prior art, the present invention provides a method for formulating and executing multi-mode access control policies in a cloud environment, the purpose of which is to realize Data security access control mechanism, so as to solve the technical problems existing in existing methods that cannot be applied to frequent changes in user permissions or frequent changes in attribute values

Images