5results about How to "Flexible Access Control" patented technology

The invention provides an Internet of Things data processing method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps that an Internet of Things device carries out the digital signature of an authentication request through employing a pre-stored private key, and generates a signed authentication request; the smart contract in the block chain network receives the signed authentication request, and the smart contract generates an authentication token including an authentication result, a validity period and an authorization level based on the historical authentication record, the credit score, the current timestamp and the challenge value; the Internet of Things equipment receives the encrypted authentication token and the intelligent contract address; the Internet of Things equipment configures own access authority and function limitation according to the authentication result, the validity period and the authorization level; and the Internet of Things equipment takes the intelligent contract address as an identity credential within the period of validity, and is used for subsequent secure communication and data exchange with other Internet of Things equipment or application programs.

The embodiment of the invention provides an access control strategy construction method and device, electronic equipment and a storage medium. The access control strategy construction method comprises the following steps: determining access control elements and attributes thereof of an application based on an acquired resource access scene; based on the access control elements and the attributes thereof, an access control strategy template is created according to different access control scenes, and the access control strategy template comprises preset access control elements and attributes; selecting the access strategy template based on a service demand and assigning a value to the attribute to create a corresponding access control strategy; and performing matching calculation on the access control strategy and the intercepted resource access request based on a strategy calculation engine, and if matching succeeds, executing a corresponding strategy action. Through the steps, access control configuration is more convenient and easier to understand, and access control is more flexible.

The invention discloses a real-name system information management method supporting multi-level authentication, and the method comprises the following steps: collecting basic identity information of a user, and storing the basic identity information through an asymmetric encryption algorithm; according to the use demand and the access authority requirement of the user, generating a multi-level authentication hierarchy; dividing the real-name system information into a basic information area, an authority information area and a sensitive information area according to the sensitivity of the real-name system information; carrying out distributed storage on real-name system information, and carrying out hierarchical encryption on data of different information areas by using a hierarchical encryption strategy; based on a multi-level authentication result and in combination with an access control strategy, authority distribution is carried out on the user, and controlled access of real-name system information is carried out under multi-dimensional verification; user information operation behaviors are monitored in real time, user behavior characteristics are analyzed based on an anomaly detection model, and when risk behaviors are recognized, an additional verification process is triggered or user operation is directly limited. According to the invention, safer, more flexible and more efficient real-name system information management is realized.

The application discloses a cross-industry supply chain supervision method based on multi-chain cooperation, a business sub-chain is used for recording internal information of enterprise transaction subjects and business data of various supply processes; a transaction main chain is mainly responsible for transaction implementation and interaction between different businesses, and records circulation states and transaction data of commodities at various links of the supply chain; and a supervision chain is used for supervising and auditing transaction data between different businesses of the supply chain. The application combines an identity-based encryption mechanism based on fine-grained privacy protection, protects the privacy of multi-party cooperative transaction data in the supply chain process, and solves the contradiction between the privacy of supply chain transaction data and the implementation of supervision. The application designs two verification methods of transaction types based on an aggregated signature protocol, so as to realize aggregated verification of on-chain transactions and rapid tracking of abnormal transactions, and effectively improves the performance of system supervision and traceability.

This invention belongs to, but is not limited to, the field of information security technology, and particularly relates to an efficient data sharing method and system supporting user revocation and key tracking, comprising: system initialization, where an attribute authority generates a master public key and a master private key; attribute key generation, where a data user sends a key request to the authority and receives the corresponding attribute key; data encryption, where the data owner formulates an access policy for their data and encrypts the data accordingly, then uploads the ciphertext to the cloud; update key generation, where the attribute authority generates an update key for its maintained revocation list; decryption key generation, where the data user executes to obtain the decryption key; ciphertext decryption, where users who meet the policy and have not been revoked can decrypt the data; and tracking data encryption and malicious user tracking, where any user can perform tracking encryption to complete malicious user tracking.