Distributed access control method based on block chain

Abstract

The invention relates to a distributed access control method based on a block chain, and belongs to the field of information security. The method comprises the following steps: designing a distributed access authorization process: designing the distributed access authorization process according to the functions of each component in a distributed access control model B-ABAC based on a block chain; meanwhile, in the authorization process, recording generated authorization access records on the block chain; S2, designing an attribute and strategy intelligent contract: separating functions of attribute authority and strategy authority, and dispersing the functions into an intelligent contract and a block chain account book in the B-ABAC model; and S3, designing consensus algorithm: using the distributed decision network to replace original decision points, and designing and using the improved consensus algorithm to carry out consensus maintenance on the distributed decision network. In an untrusted environment, fine-grained and dynamic access authorization can be provided, meanwhile, the security and auditability of an access model are improved, and human intervention in the authorization process is reduced.

Description

technical field [0001] The invention belongs to the field of information security and relates to a block chain-based distributed access control method. Background technique [0002] As a key link in information security, access control plays a particularly prominent role in protecting information systems. Access control technology can ensure that resources can only be operated legally by legitimate users according to preset access control policies, preventing unauthorized access to information. [0003] Traditional access control, such as discretionary access control (DAC) and mandatory access control (MAC), is based on the administrator's preset access policy for access authorization. Not suitable for distributed systems at this stage. [0004] In recent years, with the rapid development of cloud computing and the Internet of Things, the nodes in the access control domain present the characteristics of massive, dynamic and heterogeneous, which also pose new challenges to ...

AI Technical Summary

Problems solved by technology

In the authorization process, each access depends on a centralized entity to make access decisions, and there is a problem of transparency in authority judgments

Moreover, there are a large number of devices with low security protection in the access control domain, and the attacker is likely to carry out DDoS, collusion, and man-in-the-middle attacks on the access control authorization server by controlling a large number of low-protection devices.

When a single decision point is attacked or fails, it will cause the entire access control system to stop functioning. Therefore, the access control model with a centralized layout faces great challenges under this threat.

Images