Dynamic authority access control method based on privacy protection

Abstract

The invention provides a dynamic authority access control method based on privacy protection, which comprises the following steps: initializing protocol parameters in an information sharing network domain, carrying out identity authentication of hidden attributes on terminal members, and after the authentication succeeds, setting, by a data sharer, the access authority of the shared resources according to the attribute parameters of the data sharer, encrypting the shared resources and storing the encrypted shared resources into an encrypted database; searching for, by a data acquirer, the shared resource to be accessed according to a keyword, acquiring a ciphertext storage link after verifying the access authority, downloading the ciphertext resource through the link, and calculating a decryption key to decrypt and acquire the ciphertext resource; and meanwhile, updating, by a terminal member, the access authority of the terminal member by acquiring rewards or punishment and the like.Double authentication is used to prevent collusion attacks, the safety of shared resources is guaranteed, personal privacy is protected, flexible and fine-grained data resource access is achieved based on attribute matching dynamic access control, access management is greatly simplified, and resource sharing is more flexible, efficient and practical.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to a dynamic authority access control method based on privacy protection. Background technique [0002] With the continuous innovation and development of computer technology, the efficiency of information storage and real-time exchange has also been greatly improved. At the same time, this also puts forward higher requirements for data sharing technology. Nowadays, data exchange in the form of an open network is mostly used in different fields. This highly open network can easily become the target of illegal attackers. How to ensure that all kinds of data Information security and ensuring the normal operation of various devices is a difficult problem that data sharing technology needs to solve. [0003] As an important foundation and core, the Internet connects various fields as a whole and realizes the integration of various networks. While enjoying the great...

AI Technical Summary

Problems solved by technology

[0005] Aiming at the technical problem that personal identity information is easily exposed and sensitive data cannot be flexibly protected during the identity authentication process of the existing information resource sharing method, the present invention proposes a privacy protection-based dynamic authority access control method, which adopts identity authentication with hidden attributes In the identity authentication process of resource information sharing, the technology realizes identity authentication and at the same time protects personal privacy very well, and combines resource data sharing with dynamic authority access control technology, and manages data hierarchically according to dynamic authority access control technology. Shared data provides flexibility and security, while reducing the computing and communication overhead of each participant, using identity authentication and attribute permission parameter matching to avoid collusion attacks by terminals without permissions

Images