Distributed extensible access control authorization system and method based on block chain

Abstract

The invention discloses a distributed extensible access control authorization system and method based on a block chain. According to the scheme, the block chain smart contract is taken as a carrier, a new architecture is provided, a traditional access control model is combined, and the concept of the attribute sequence number value pair and the prefix identifier is introduced to optimize the system strategy retrieval method. According to the architecture level, an intelligent gateway is introduced between a block chain network and each management domain to serve as an access request and data request agent, and equipment registration and attributes are managed by an administrator; according to the intelligent contract level, a strategy implementation contract, a strategy contract and a strategy management contract are designed in the scheme, and authorization management is carried out on access control together; and according to the policy retrieval method level, prefix identifiers are generated for access requests and policies, bit calculation is performed on the access requests and the policies, policy preliminary matching is performed, and policy conflict configuration is introduced, so that the policy retrieval speed is greatly optimized. Therefore, compared with other access control solutions, the scheme has certain advantages.

Description

technical field [0001] The invention belongs to the field of access control technology, and relates to a distributed and scalable access control authorization scheme for attributes. The scheme proposes a new distributed architecture, combined with a traditional attribute-based access control model, and introduces attribute sequence number value pairs and prefix identifiers. The concept of the system optimizes the policy retrieval method. Background technique [0002] The privacy and security of industrial data is of paramount importance and is in the fundamental economic interest of businesses and their customers. Access control technology is one of the core technologies of data security protection. It can grant the subject access to the object according to the pre-defined access authorization policy, and effectively control the process of the subject's use of the authority, so as to realize authorized access to data and prevent unauthorized access. Information leakage. Co...

AI Technical Summary

Problems solved by technology

[0005] The purpose of the present invention is to solve the problem that the existing access control scheme does not take into account that there are a large number of equipment with insufficient capabilities on the industrial site, and the factory layout and equipment are highly dynamic. The increase of access control, the increase of computing and storage costs and the inefficiency of access control, through the blockchain smart contract as the carrier, a new distributed architecture is proposed based on the blockchain, combined with the traditional attribute-based The access control model of the system introduces the concept of attribute serial number value pair and prefix identification to optimize the system policy retrieval method

Images