Access authority control system and method based on block chain and SGX

Abstract

The invention discloses an access authority control system and method based on a block chain and an SGX. The system comprises a block chain system, an authority management contract, an authority control contract and local service thereof, an authority verification contract and local service thereof on a block chain node, and an identity verification system, and provides a safe, credible, transparent and controllable underlying architecture for access authority control. According to the system, authority operation control and management are carried out through an intelligent contract, off-chain secret processing is carried out on key data in an on-chain authority operation process through a local SGX security area, and information security and accuracy are ensured. In addition, the system also specially considers the immediacy requirement of permission deletion, special processing is carried out on the permission deletion, and attacks based on a time sequence are avoided. According to the method disclosed by the invention, an information security, process and monitorable underlying architecture is provided for an access authority control mechanism, particularly an access authority control mechanism of an information system based on a cloud, and better security guarantee is provided for organizations and individuals.

Description

technical field [0001] The present invention relates to the field of information technology security, in particular to an access authority control system and method based on blockchain and SGX. Background technique [0002] In a huge information system, it is usually necessary to classify and control the information content that different participants can access, so that participants can and can only access the information content that the system allows them to access, so as to ensure the privacy and security of information data sex. This brings up the need for access control. The basic idea of ​​access control is to firstly identify the user identity by verifying various login credentials, including user name password, security token, biometrics, etc. After obtaining the user's identity, according to the access level and other authority information set by the system for the user, the user's identity information, etc., the user is given the corresponding access authority. ...

AI Technical Summary

Problems solved by technology

[0003] However, the existing access control methods do not consider the security of the access control itself, and lack transparency

Users accessing the information system cannot independently know the changes of their own permissions, and if the information system does not have a unified record and monitoring behavior for internal permission changes, it will also face the risk of malicious attackers obtaining permissions without being perceived by others

In addition, in the cloud-based data organization structure, when accessing information through a complex network environment, a more precise and fine-grained access control mechanism is required to manage user and access object data in a unified manner, and the access control mechanism itself is more vulnerable to Attacks, so a safe and reliable access control method with strong scalability is needed

Images