Decentralized access control method and system based on transaction

Abstract

The invention discloses a decentralized access control method and system based on transaction. The system is composed of nodes responsible for different functions on a decentralized network. An authorization service module for constructing the nodes comprises a strategy judgment unit, a strategy management unit, a script interpreter and a strategy information unit. The transaction is used as a propagation medium and an evidence for access control in the decentralized network system, the transaction types comprise a subject registration transaction, an object hosting transaction, a strategy release transaction and an access authorization transaction, the transaction types are used for recording related entity attributes and operations executed by nodes, and the integrity and authenticity ofthe transaction are guaranteed by adopting a scripted password authentication technology. The access control system based on transaction circulation provided by the invention covers a resource hosting process, a main body registration process, a strategy release process and an access authorization process in access control, and can realize authorization management based on a dynamic access strategy without a trusted party.

Description

Technical field[0001]The invention mainly belongs to the field of information technology, and is a transaction-based decentralized access control method and system.Background technique[0002]With the development of the Internet and the times, there is increasing emphasis on openness, sharing and collaboration between systems. However, with the requirements for data sharing and exchange and data security among applications, enterprises, and governments, traditional centralized access control technology is difficult to solve the consequent problems such as resource leakage and data exposure. Taking into account the high flexibility, availability, and manageability of attribute-based access control in protecting shared resources, as well as the decentralized characteristics of blockchain technology and the advantages in traceability and non-tampering, it can be used to achieve Protection of shared resources in an open environment. Therefore, combining the two has important research valu...

AI Technical Summary

Problems solved by technology

For example, ABAC-based XACML policy management has been used for access control on the blockchain, by storing access policies in XML format; another example is the invention patent application "Script-based attribute-based access policy representation and execution" with application number "201911059491.6" Method", this method is built on the common script interpreter, uses the script language to express the judgment logic of the attribute-based access strategy and combines the JSON language to build a lightweight and efficient access strategy model, but this solution lacks Centralized access control system framework and specific processes

Images