52results about How to "Improve Access Control Efficiency" patented technology

The invention relates to an access control method and device, computer equipment and a storage medium. The method comprises the following steps: receiving a service access request of a terminal; obtaining a to-be-accessed resource node of the service access request; based on an authority rule corresponding to the resource node, obtaining information corresponding to the authority rule in the service access request as context attribute information of the service access request; and releasing or intercepting the service access request according to an authentication result obtained by authenticating the context attribute information and the authority rule. The security of access control can be effectively improved, and the efficiency of access control is further improved.

The invention requests to protect a system and method for controlling untrusted resource transmission in Internet of vehicles. The method comprises the following steps: designing an access control strategy and a node trust value calculation method for nodes of a resource output vehicle, limiting fixed attributes and dynamic attributes of the resource output vehicle, and dynamically generating a fine-grained access control strategy according to the traveling track of the vehicle to ensure that the access control strategy has better extensibility and flexibility. Thereby, the anonymous directional transmission of messages can be achieved, the waste of resources can be reduced, and the identity privacy of communication vehicles can be effectively protected; the calculation of node trust values can guarantee the trust degree of resource communicators and meet the security and privacy requirements of security related messages in Internet of vehicles; and malicious nodes can be effectively identified, and the injection of malicious resources and the transmission of untrusted resources can be prevented. The method disclosed by the invention can be widely applied to the related fields of mobile Internet, wireless sensor network and the like.

The invention discloses a two-level policy decision-based access control method and a two-level policy decision-based access control system, and belongs to the field of access control in information safety. In the method, a local policy decision point (PDP) is deployed at a policy enforcement point (PEP) end, and the local PDP makes a decision for an access request according to a local policy cache, and if the local PDP cannot determine that the decision is a deterministic decision, a central PDP finally finishes the decision according to a system policy library. The system comprises a policydecision server, an attribute publishing point and a plurality of resource servers, wherein a policy enforcement point (PEP) and a local policy decision point (PDP) are deployed on each resource server; and a central policy decision point (PDP) is deployed on the policy decision server. The invention has a good dynamically adjusted elastic system framework, fully utilizes the computing resources of the PEP end, lightens the burden of the central PDP, reduces the network transmission overhead and effectively improves the access control efficiency at extremely low policy update cost.

The invention is applied to the field of information security, and provides an access control method and an access control device of a network security group. The access control method of the network security group comprises the steps of displaying all network security groups in a system in the same human-computer interaction interface; detecting mouse dragging operation of a user in the human-computer interaction interface; and building an access relationship of a network security group corresponding to an initial position of the mouse dragging operation, to a network security group corresponding to an end position of the mouse dragging operation. The access control method of the network security group can enable the user to being capable of rapidly, accurately and efficiently building access control relationships among the network security groups from the overall situation, and improves access control efficiency among the network security groups.

The invention discloses a parking lot control method, and the method comprises the following steps: obtaining the license plate number information of a vehicle when the information that the vehicle leaves the parking lot from an exit is detected; determining whether the vehicle corresponding to the license plate number information completes the charging operation at preset time intervals or not; and controlling the gate to open when the charging operation is completed at the preset time intervals. The invention also discloses a parking lot control device. According to the invention, the user can carry out the payment in the parking lot in advance, does not need to carry out centralized payment at the exit of the parking lot, and improves the access control efficiency of the parking lot.

The invention discloses a cipher text access control system based on a cloud computing platform. The system comprises a cloud storage service module, a plaintext preprocessing module, a secret key generation module, an encryption module, a decryption module and a user access module. A plaintext of a user owner client is encrypted in a triple manner to obtain a triple encrypted cipher text, the triple encrypted cipher text is packaged by utilizing a digital envelope technology and then stored in the cloud storage service module, and the corresponding decryption module is arranged. Fine access control can be realized, computing cost of encryption and decryption between a user owner and a user can be reduced effectively, the data confidentiality is ensured, and collusion-proof aggressivity and forward and backward safety are included; and the cipher text access control system is controlled in different levels, the efficiency of access control is improved, a code division multiplexing technology is used to code plaintext information, the cipher text storage space is reduced, and the total performance of the system is improved.

The invention discloses an encryption system supporting fine-grained access control. The encryption system comprises a cloud storage server, a plaintext preprocessor, a management end run by an authentication center and a client run by a data owner and a shared user. According to the encryption system, the computation cost for encryption and decryption of the data owner and the user can be effectively reduced, and the fine-grained access control is realized; the plaintext information after encoding is divided into different access levels according to an access structure tree, so that the efficiency for access control is improved, and furthermore, the plaintext information is encoded by utilizing a code division multiplexing technology, so that the ciphertext storage space is reduced and the overall performance of the system is improved.

The invention discloses an access control method and device based on a token and supporting object attributes. A management party predefines the category of the attribute condition and the category ofthe access permission, and carries out attribute labeling on managed equipment; the management party receives a first token request sent by an application party, takes out an attribute condition setCS, an access permission set AR and a public key PK of an applicant in the request; the management party performs identity authentication on the applicant by using the PK, evaluates the attribute condition set CS and the access permission set AR, generates a serial number of a token after the sets pass evaluation, generates a token of an applicant based on the serial number and the first token request and sends the token to the applicant; the applicant serves as a subject of access control, and sends the corresponding token to an object; and the object carries out identity authentication on the subject and verifies the received token, including the verification of the attribute condition set CS by the object according to the attribute of the object, and if the token passes verification, access is allowed.

The invention relates to a supply chain access control system based on a public chain smart contract, which is used for access control in a block chain traceability scene. According to the system, anRBAC model is adopted, and the system comprises a system contract SC, role contracts RC and data contracts DC. The RBAC model comprises four types of agents which are associated with one another and an operation set OP, and the four types of agents are respectively a user agent u, a role agent r, a permission agent p and an object agent ob. The system contract SC is used for managing a user agentu, the role contracts RC are used for managing a role agent r and a plurality of permission agents p, and the data contracts DC are used for managing the object agent ob. The deployment transaction ofthe system contract SC serves as an entrance of the RBAC model and is firstly linked, and the multiple role contracts RC and the multiple data contracts DC are respectively called by the system contract SC. Compared with the prior art, the system has the advantage that data sharing convenience, data privacy security and the like are ensured at the same time.

The invention discloses a security system for medical case information access, which includes a medical user mobile terminal, an access user mobile terminal, a cloud storage server, an information encryption module, and an information decryption module. The invention can prevent the leakage of medical medical record information, effectively protect the safety of the medical medical record information of the mobile terminal of the medical user, and has strong ease of use and practicability; the coded medical medical record information is divided into different access points according to the access structure tree Level, improve the efficiency of access control, use code division multiplexing technology to encode medical record information, reduce the storage space of cloud storage server; can realize fine-grained access control, effectively reduce the computational overhead of system encryption and decryption.

The invention discloses a comprehensive meteorological data acquisition system. The system comprises a man-machine interaction system, a terminal and a key acquisition module, the key acquisition module is used for generating a system public key and a first user private key; the information receiving module is used for receiving a ciphertext and a verification token which are generated based on anaccess structure and a plaintext and sent by a terminal, receiving a conversion key and a second user private key which are generated based on the system public parameter, the first user private keyand the corresponding user attribute and are sent by the user access end, the division and decryption text generation module is used for generating a partial division and decryption text based on thesystem public parameters, the unique user identifier of the user access end, the conversion key and the ciphertext; and the information sending module is used for sending the partial divided decryptedmessage to the user access end, so that the user access end decrypts the partial divided decrypted message by using the system public parameter and the second user private key to obtain a plaintext.The system mitigates the computing and storage load of the user.

The invention discloses a file segmenting method based on a digital abstract. The algorithm mainly comprises a digital abstract module, a file segmenting module and a file recombination module, wherein the digital abstract module extracts and converts file digital abstract, the file segmenting module converts the file into a plurality of file blocks with same size sequentially, and the file recombination module recombines different file blocks into two files. The digital abstract serves as file extraction basis. Data confidentiality is ensured, and data integrity verification can be completed. The file segmenting method is applicable to file outsourcing storage.

The invention discloses a receipt access control method and device. The receipt access control method comprises the steps that when receipt inquiry information of a user is received, an identity identifier of the user and a receipt identifier of a receipt which the user needs to inquire in the receipt inquiry information are obtained; the corresponding receipt is searched for according to the obtained receipt identifier; when the corresponding receipt is found, whether an identity identifier consistent with the obtained identity identifier exists in a creator field of the found receipt is analyzed; when the identity identifier consistent with the obtained identity identifier exists in the creator field of the found receipt, the user is authorized to access the found receipt. By means of the receipt access control method and device, access control efficiency can be improved.

The invention discloses an intelligent access control management method and system based on the Internet of Things. The method comprises the steps that an intelligent terminal is connected with an access control server in a communicating mode; the access control server receives an access instruction sent by the intelligent terminal; when the access control server verifies that the access instruction sent by the intelligent terminal is consistent with a preset correct instruction, the access control server controls the access control opening, so that an user is connected with the access controlserver by scanning an access control QR code in a communicating mode, then the user can input the access control instruction directly on the intelligent terminal, when the access control instructioninput by the user is correct, the access control opens, and the user can enter; inputting the instruction before the access control is not required, plagiarism by illegal persons is prevented, card wiping to enter the access control is not required, forgetting or loss of a card is not required to worry about, and manual management is not required; and labor costs are reduced, the efficiency of theaccess control is improved, convenience is brought to the user, and meanwhile, the security of the access control is improved.

The embodiment of the invention provides a Kubernetes cluster access control method, a Kubernetes cluster access control system and related equipment, which are used for improving the efficiency of Kubernetes cluster access control management. The method provided by the embodiment of the invention comprises the following steps: recording a mapping relationship between identities of a plurality of Kubernetes clusters and type information of an entry controller in a database; obtaining an entry service management request, wherein the entry service management request at least comprises an identity label of a target Kubernetes cluster and service configuration information; inquiring the type information of an entry controller corresponding to the target Kubernetes cluster in the database; and generating an entry service object program according to the type information of the entry controller of the target Kubernetes cluster and the service configuration information.

The embodiment of the invention relates to the field of communication, and discloses an access control method, electronic equipment and a storage medium. The access control method comprises the following steps: acquiring second region information, wherein the second region information comprises each management node in the second region and information of each user accessing each management node inthe second region; generating an access control strategy of each user; and issuing an access control strategy to each management node in the second area, so that each management node in the second area performs access control according to the access control strategy corresponding to the user initiating the access request inquired in the access control strategy of each user. The access control method provided by the embodiment of the invention can simplify the access control process and improve the access control efficiency.