Decentralized access control method and system based on transaction

A decentralized access control technology, applied in the information field, can solve the lack of a decentralized access control system framework and specific processes and other issues

CN112350863AActive Publication Date: 2021-02-09UNIV OF SCI & TECH BEIJING
5 Cites 2 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Publication Date
2021-02-09

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention discloses a decentralized access control method and system based on transaction. The system is composed of nodes responsible for different functions on a decentralized network. An authorization service module for constructing the nodes comprises a strategy judgment unit, a strategy management unit, a script interpreter and a strategy information unit. The transaction is used as a propagation medium and an evidence for access control in the decentralized network system, the transaction types comprise a subject registration transaction, an object hosting transaction, a strategy release transaction and an access authorization transaction, the transaction types are used for recording related entity attributes and operations executed by nodes, and the integrity and authenticity ofthe transaction are guaranteed by adopting a scripted password authentication technology. The access control system based on transaction circulation provided by the invention covers a resource hosting process, a main body registration process, a strategy release process and an access authorization process in access control, and can realize authorization management based on a dynamic access strategy without a trusted party.
Need to check novelty before this filing date? Find Prior Art

Description

Technical field

[0001] The invention mainly belongs to the field of information technology, and is a transaction-based decentralized access control method and system.Background technique

[0002] With the development of the Internet and the times, there is increasing emphasis on openness, sharing and collaboration between systems. However, with the requirements for data sharing and exchange and data security among applications, enterprises, and governments, traditional centralized access control technology is difficult to solve the consequent problems such as resource leakage and data exposure. Taking into account the high flexibility, availability, and manageability of attribute-based access control in protecting shared resources, as well as the decentralized characteristics of blockchain technology and the advantages in traceability and non-tampering, it can be used to achieve Protection of shared resources in an open environment. Therefore, combining the two has important research valu...

Examples

Embodiment Construction

[0098]In order to make the objectives, technical solutions and advantages of the present invention clearer, the following further describes the present invention in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the present invention, but not to limit the present invention.

[0099]On the contrary, the present invention covers any alternatives, modifications, equivalent methods and schemes defined by the claims in the spirit and scope of the present invention. Further, in order to enable the public to have a better understanding of the present invention, in the following detailed description of the present invention, some specific details are described in detail. Those skilled in the art can fully understand the present invention without the description of these details.

[0100]In the system model of the present invention, a main feature is that all blockchains share a set o...