SDN information access control method based on authenticated hierarchical attribute encryption

Abstract

An SDN information access control method based on authenticated hierarchical attribute encryption is based on a control system consisting of attribute authorities, SDN controllers, a cryptographic component and a decryption component, wherein a root attribute authority in the attribute authorities is responsible for the registration of the global attributes and the release of a public key; a localattribute authority is responsible for publishing a private key associated with a certain type of attribute; the SDN controllers are responsible for collecting, storing, and managing important information including SDN flow tables, routes, and data volumes, and interacting with SDN controllers of other domains; the cryptographic component is responsible for delivering the collected user or othernetwork device data to the SDN control layer and encrypting the data; and the decryption component is responsible for obtaining useful data for different network applications. The decryption componentuses different attribute sets to describe identities of different network applications, and has a private key corresponding to the set of attributes, and only when the set of attributes embedded in the private key satisfies the access policy, correct information can be obtained.

Description

technical field [0001] The invention relates to secure access control of SDN information, in particular to an SDN information access control method based on authentication hierarchical attribute encryption, which belongs to the field of network information security. Background technique [0002] Software defined network (SDN for short) is an excellent network architecture, which logically separates the control layer and data layer of the network, thereby reducing the hardware cost and management cost of network construction. On this basis, administrators or developers can conveniently perform centralized debugging on devices from different manufacturers. Although it has many advantages, SDN information security issues hinder its further application. Many solutions are difficult to strike a balance between security, effectiveness, and usability, and even limit the inherent advantages of SDN such as scalability. One of the most serious problems is that because the SDN control...

AI Technical Summary

Problems solved by technology

Although it has many advantages, SDN information security issues hinder its further application. Many solutions are difficult to strike a balance between security, effectiveness and usability, and even limit the inherent advantages of SDN such as scalability.

One of the most serious problems is that because the SDN control layer facilitates remote control, this makes the network sensitive information controlled by the control layer extremely vulnerable to remote control and thus being stolen by attackers.

However, the existing solutions are not enough to realize the flexible, efficient and accurate information security management of SDN, so it is particularly important to deploy a safe, flexible and efficient information security management mechanism

Images