Certificate-based access control system and method

Abstract

The invention discloses a certificate-based access control system and method, wherein, in the access control system, an access rule module is formulated for resource owners to restrict access to resource users according to the openness of the resources they own; The scheme module is used for the resource owner and the certificate authority to establish a delegation scheme according to the authorization conditions of the certificate; the application access resource module is used for the resource user to request the resource owner to access the resource and return the access result to the resource user; the application certificate authorization module It is used for resource users to apply for a certificate from a certificate authority and return the certificate application result to the resource user. The technical solution of the present invention solves the problem of efficiency burden and complex reasoning and mapping, realizes the separation of responsibilities of the resource owner and also realizes the access isolation between the resource owner and the certificate authority, thereby reducing the burden of the resource owner , simplifying management.

Description

technical field [0001] The invention relates to the technical field of computer security, in particular to a certificate-based access control system and a certificate-based access control method. Background technique [0002] As a means of information protection, access control is an important part of many distributed applications, and several centralized and distributed solutions have been proposed for such applications. Certificates are particularly suitable for distributed systems and are used in a variety of ways. For example, in the network environment, with the rapid development of electronic payment in China, the electronic payment binding function prevents unauthorized visitors from accessing or acquiring data resources. In real life, intelligent traffic control technology is becoming more and more intense. Without intelligent ticketing control, many people may experience ticket evasion and other situations, resulting in improper use of resources. With the continuo...

AI Technical Summary

Problems solved by technology

According to the above technical solution, the resource owner of the traditional authorization certificate model has solved the problem of efficiency burden caused by searching for the certificate issuing certificate, and solved the problem of complex reasoning and mapping brought about by the hierarchical establishment and control of subsequent delegation in the traditional delegation access control model. While realizing the separation of duties of the resource owner itself, it also realizes the access isolation between the resource owner and the certification authority, which reduces the burden on the resource owner and simplifies management.

Images