Method for implementing core role-based access control based on attribute-based encryption

Abstract

The present invention relates to a method for implementing a core role-based access control (RBAC) model based on a policy-attribute-based encryption algorithm. The method includes: creating and deleting a role and the related password information; creating and deleting a user and the related password information; implementing user / role relationship assignment and user / role relationship revocation through the use of the attribute-based encryption algorithm; implementing the role / authority relationship assignment and role / authority relationship revocation through the use of the attribute-based encryption algorithm; and implementing by the user the attribute-based decryption algorithm to achieve the access to the controlled resources, that is, the authorized decision. The method of the invention utilizes the cryptography method to ensure the correct implementation of the role-based access control model. The authorized decision does not depend on any third party, which can not only improve the safety and efficiency of sharing resources in an outsourcing environment, but can also provide a feasible solution for the role-based access control system of a current enterprise-level information system to be transplanted into the outsourcing environment such as cloud computing.

Description

technical field [0001] The invention relates to a method for implementing core role access control based on attribute-based encryption, which belongs to the technical field of information security. Background technique [0002] Role Based Access Control (RBAC) introduces roles between users and access rights, users are managed with one or more specific roles, roles are associated with one or more access rights, and users and access rights are realized The logical separation of access control greatly simplifies rights management, and this method is closer to the management method of real organizations, so it has gradually become an access control method commonly used in the industry. The national standard GB / T 25062-2010 defines three models of core RBAC, hierarchical RBAC and constrained RBAC, in which core RBAC defines the minimum set of elements (sets) and relationships necessary to fully implement an RBAC system. The core RBAC management functions include the creation an...

AI Technical Summary

Problems solved by technology

This scheme cannot implement a fine-grained RPA policy, and the efficiency is low when the user is revoked, because the encryption keys of all files that the user can access need to be updated, and the data owner not only needs to update the key of the role corresponding to the revoked user And re-encrypt the file key set, and re-encrypt the updated file key set for the roles corresponding to all other users who have access to these files, and the involved users also need to re-obtain and decrypt the file key set

Images