Multi-level access control method and system based on multi-secret visual password

Abstract

The invention discloses a multi-level access control method and system based on a multi-secret visual password. The method comprises the following steps: 1) a server sets a corresponding secret imagefor each permission level in a control policy, and assigns a permission level to each user; 2) the server constructs a corresponding sharing matrix for each secret image, and then fills pixels in thesecret image into a plurality of shared shares of different levels according to the sharing matrix; 3) the server distributes the shared shares to users of corresponding permission levels according toa permission allocation policy, and the server keeps a minimum level shared share and the secret images; and 4) the server receives authorization requests and the shared shares issued by at least k-1users, and then performs secret recovery according to the received shared shares and the reserved shared shares, and identifies the authenticity of the shared shares to decide whether to authorize. By adoption of the multi-level access control method and system, the authentication operation is achieved by using a human eye vision system, so that the implementation process of the access control system is simper and easier.

Description

technical field [0001] The invention belongs to the technical field of network security, and in particular relates to a multi-level access control method and system based on multi-secret visible passwords. Background technique [0002] Access control technology refers to the means by which the system restricts the user's identity and the predefined policy group to which it belongs to the ability to use data resources. It is an important technology to ensure the security of information systems. It explicitly permits or restricts access capabilities and scope through some means, thereby restricting access to key resources and preventing illegal users from intruding into information systems or legitimate users from causing damage without authorization. Access control generally includes three elements: subject, object and security access rules. The subject refers to the active party that issues the access operation, usually a user or a computer process; the object is an informa...

AI Technical Summary

Problems solved by technology

The encryption and decryption process of this kind of cryptographic technology is very complicated, generally requires a lot of calculations, and can only be carried out with the help of auxiliary equipment such as computers.

At the same time, the existing access control method has a complicated operation process, which is difficult for people who do not have cryptography knowledge to understand, and requires high professional quality for users.

Images