Certificate-Based Access Control System and Access Method in Network Structure

Abstract

The invention discloses an access control model based on a certificate in a network structure, and an access method. The access control model comprises a starting point, an end point and a node network, wherein the starting point is an initiating node of an access request, the end point is an accessed node, and the node network is a network-shaped topological structure formed by connecting multiple nodes through a to-be-authorized list; the starting point initiates an access request to the end point, the end point generates a to-be-authorized certificate and sends the to-be-authorized certificate to the starting point; the certificate performs authorization flow by entering the node network, the starting point accesses the end point by using the authorized certificate. The subject and object are regarded as the nodes to form the node network, the nodes are acted together on a decision for access control according to the regulated logic expression formula the certificate transmission, indirect access rule and like authorization modes, so that the nodes can manage the permission more autonomously and dynamically without depending on or influencing the whole system; and meanwhile, theauthorization decision adopts the topological structure of the node network, and the model can sufficiently consider the privacy of each node in the face of complex information propagation.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a certificate-based access control system and access method in a network structure. Background technique [0002] The classic access control system is represented by the subject, object and permission triplet to represent the behavioral relationship between access participants. There are three classic access control systems in the field of access control: discretionary access control system (DAC, Discretionary Access Control), mandatory access control system (MAC, Mandatory Access Control) and role-based access control (RBAC, Role- Based Access Control). They have their own application scenarios and advantages and disadvantages. In the past security system, the expression form of this triple can indeed express the access authorization situation very well. However, due to the popularity of the Internet on more types of devices and the development of the Internet of...

AI Technical Summary

Problems solved by technology

And in the definition of the strategy, the access with path (indirect access) only judges the objective conditions between nodes, such as the relationship strength or distance between nodes, while ignoring the autonomy and scalability of the model, which is very important for protecting users Privacy has some impact

Images