A soil survey data security access control method and system

Abstract

The present invention provides a method and system for secure access control of soil survey data; it relates to the technical field of data access control; the method comprises: a soil database access control model receives a soil database access request sent by an access node; according to the soil database access request, the user region and user level on the access node are determined, and according to the user region, user level and user historical access behavior, the credit level of the access node is determined; according to the credit level, user region and user level of the access node, a matching target access control policy is searched from the access control policy set stored in the soil database access control model; the target access control policy is sent to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy; based on the technical scheme, the security of access control to soil survey data can be improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data access control, and in particular to a method and system for secure access control of soil survey data. Background Art

[0002] The soil census is an important survey of the national conditions and national strength, involving various different links such as field survey sampling and internal testing and analysis. It is expected that massive data such as text, pictures, and videos will be generated after the census is completed.

[0003] The soil survey has a large amount of data, diverse data types, and some data are highly sensitive. How to promote efficient access to and rational use of data while ensuring data security is the key to making full use of the soil survey data.

[0004] At present, the access control for data is mainly based on the allocation of accounts and passwords. After verifying that the account and password match, the database can be accessed. However, when the existing technology is applied to the soil three-census database, the security of access cannot be guaranteed, so the security of access control is currently low. Summary of the invention

[0005] The purpose of the present invention is to provide a soil survey data security access control method and system to address the problem of low security of soil data access control in the prior art.

[0006] In order to solve the above technical problems, the present invention adopts the following technical solutions:

[0007] In a first aspect, an embodiment of the present invention provides a method for secure access control of soil census data, the method comprising: a soil database access control model receives a soil database access request sent by an access node, the soil database access control model being deployed on a block in a blockchain; the soil database access control model determines the user region and user level on the access node according to the soil database access request, and determines the credibility level of the access node according to the user region, user level and user historical access behavior; the soil database access control model searches for a matching target access control policy from an access control policy set stored in the soil database access control model according to the credibility level of the access node, the user region and the user level, the access control policy set being preset based on the user region, the user level, the credibility level and the sensitivity level of the data in the soil database; the soil database access control model sends the target access control policy to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy.

[0008] Optionally, the initial reputation value, historical reputation value and Public Key Infrastructures (PKI) reputation value of the access node are determined based on the user region, user level and user historical access behavior; the comprehensive reputation value of the access node is generated based on the initial reputation value, historical reputation value and PKI reputation value; and the reputation level of the access node is determined based on the comprehensive reputation value of the access node.

[0009] Optionally, the soil database access request includes the original user identity information of the access node, the PKI certificate and the soil data requested for access; the soil database access control model verifies the user identity of the access node based on the original user identity information and the PKI certificate. If the contents of the PKI certificate and the original user identity information match successfully, the credibility level of the access node is determined based on the user region, user level and user historical access behavior in the PKI certificate.

[0010] Optionally, the initial reputation value of the access node is determined based on a first preset formula, the number of successful accesses to the access node, the number of malicious accesses by users of the access node, and the total number of categories of user-accessible data levels of the access node; the first preset formula includes: ; Where m represents the total number of data regional levels, and n represents the total number of data sensitivity levels. represents the weight of successful access of the access node to the soil data of the jth sensitivity level in the i-th region, represents the number of successful accesses by the access node to the soil data of the jth sensitivity level in the i-th region, represents the malicious access weight of soil data of the jth sensitivity level in the i-th region, represents the number of malicious accesses by the access node to soil data of the jth sensitivity level in the i-th region, , , m and n are both positive integers, i is less than is a positive integer, and j is a positive integer less than n.

[0011] Optionally, the historical reputation value of the access node is determined based on a second preset formula, a comprehensive reputation value of each access completed by the access node before the current access, and a total time from the access request to the policy matching and authorization completion of each access request before the current access; the second preset formula includes: ; Where K represents the total number of historical visits to the node, It represents the total time from the time the access request is made to the time the policy is matched and the authorization is completed for the kth access of the access node. Indicates the access node The comprehensive reputation value at the end of the visit, K is a positive integer, and k is a positive integer less than K.

[0012] Optionally, the PKI reputation value of the access node is determined based on a third preset formula, the user region and the user level; the third preset formula includes: ;in, Indicates the PKI reputation weight of the i-th level regional user, Indicates the PKI reputation value of users in the i-th level region, It represents the PKI reputation weight of the qth level user among the ith level regional users. It represents the PKI reputation value of the qth level user in the ith level region, where q is a positive integer.

[0013] Optionally, based on a fourth preset formula, the initial reputation value of the access node, the historical reputation value of the access node, and the PKI reputation value of the access node, a comprehensive reputation value is generated; the fourth preset formula includes: ; Where a represents the weight of the initial reputation value of the access node, b represents the weight of the historical reputation value of the access node, and c represents the weight of the PKI reputation value of the access node. ,and .

[0014] Optionally, the user region on the access node is the i-th region, and the user level is the p-th level; if the comprehensive reputation value belongs to the first reputation level, it is determined that the access node can access the first type of soil data set, the second type of soil data set and the third type of soil data set corresponding to the p-th level user under the i-th region in the soil database; if the comprehensive reputation value belongs to the second reputation level, it is determined that the access node can access the first type of soil data set and the second type of soil data set corresponding to the p-th level user under the i-th region in the soil database; if the comprehensive reputation value belongs to the third reputation level, it is determined that the access node can access the first type of soil data set corresponding to the p-th level user under the i-th region in the soil database; wherein the first reputation level is lower than the second reputation level, and the second reputation level is lower than the third reputation level.

[0015] Optionally, the user regions include provincial, municipal and county levels, and the user categories include senior, intermediate and low levels; wherein, the first sensitive level soil data set accessible to provincial senior users whose comprehensive credit value belongs to the first credit level also includes provincial soil data surveying and mapping personnel information; the second sensitive level soil data set accessible to municipal intermediate users whose comprehensive credit value belongs to the second credit level also includes municipal soil data surveying and mapping personnel information; the third sensitive level soil data set accessible to county low-level users whose comprehensive credit value belongs to the third credit level also includes county soil data surveying and mapping personnel information; wherein, the first sensitive level is higher than the second sensitive level, and the second sensitive level is higher than the third sensitive level.

[0016] In a second aspect, an embodiment of the present invention provides a secure access control system for soil survey data, the secure access control system for soil survey data includes a soil database access control model based on blockchain, the soil database access control model includes: a policy information point (PIP), a policy administration point (PAP), a policy enforcement point (PEP) and a policy decision point (Policy Decision Point). point, PDP); the soil database access control model is deployed on the blocks in the blockchain; PEP, is used to receive the soil database access request sent by the access node; PIP, is used to determine the user region and user level on the access node according to the soil database access request, and determine the reputation level of the access node according to the user region, user level and user historical access behavior; PDP, is used to search for a matching target access control policy from the access control policy set stored in the soil database access control model according to the reputation level of the access node, user region and user level, and the access control policy set is preset based on the user region, user level, reputation level and sensitivity level of the data in the soil database; PEP, is also used to send the target access control policy to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy.

[0017] The embodiment of the present invention provides a method for secure access control of soil survey data, wherein a soil database access control model receives a soil database access request sent by an access node, and the soil database access control model is deployed on a block in a blockchain; the soil database access control model determines the user region and user level on the access node according to the soil database access request, and determines the credit level of the access node according to the user region, user level and user historical access behavior; the soil database access control model searches for a matching target access control policy from an access control policy set stored in the soil database access control model according to the credit level, user region and user level of the access node, and the access control policy set is preset based on the user region, user level, credit level and sensitivity level of data in the soil database; the soil database access control model sends the target access control policy to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy. First, the data is divided into different sensitivity levels according to the sensitivity level characteristics of the soil three-census data. The access control policy set of the trusted soil three-census database is preset by regional level, user level, reputation level and data sensitivity level, which can improve the shared security performance of the soil three-census data; second, the access control policy set is deployed on the nodes on the blockchain of the soil database access control model through smart contracts, which can realize automatic safe and efficient access control of access users based on the characteristics of blockchain that cannot be tampered with; third, by performing access control based on the reputation level, different reputation levels can access different data, thereby ensuring the security and efficiency of the soil database access control model in the soil three-census trusted access system. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A schematic flow chart of a method for secure access control of soil survey data provided by an embodiment of the present invention.

[0019] Figure 2 A schematic diagram of the architecture of a soil census data security access control system provided by an embodiment of the present invention.

[0020] Figure 3 A flowchart of another soil survey data security access control method provided by an embodiment of the present invention.

[0021] Figure 4 A schematic diagram of a master-slave multi-chain PKI model provided for an embodiment of the present invention.

[0022] Figure 5 A schematic diagram of the hardware structure of a soil census data security access control node provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0023] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present invention. Instead, they are merely examples of devices and methods consistent with some aspects of the present invention as detailed in the appended claims.

[0024] The terms used in the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. The singular forms "a", "the" and "the" used in the present invention and the appended claims are also intended to include plural forms unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0025] It should be understood that although the terms first, second, third, etc. may be used in the present invention to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present invention, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0026] The embodiments of the present invention are described in detail below with reference to the accompanying drawings.

[0027] Figure 1 A flow chart of a soil survey data security access control method provided by an embodiment of the present invention is shown in FIG. Figure 1 As shown in FIG. , the following steps S101 to S104 may be included:

[0028] S101. The soil database access control model receives a soil database access request sent by an access node.

[0029] Among them, the soil database access request includes: user original information (Identity, ID), PKI certificate and target soil data requested by the access node.

[0030] Specifically, the soil database access control model is deployed in blocks on the blockchain.

[0031] It should be noted that the soil database access control model provided in the embodiment of the present invention is based on the attribute-based access control (ABAC) model, and the ABAC model is deployed in the blockchain in combination with the PKI certificate.

[0032] A PKI certificate is an electronic file issued by a certificate authority (CA) and used to bind a public key to an entity's identity. A PKI certificate contains the entity's public key, the entity's identity information (such as name, email address), the certificate's validity period, information about the issuing CA, and the CA's digital signature. In an embodiment of the invention, when a user registers, the user's region and user level are stored in the PKI certificate.

[0033] In the embodiment of the present invention, the soil database access control model stores an access control policy set, wherein the access control policy set is preset based on the user region, user level, reputation level and sensitivity level of the data in the soil database.

[0034] Specifically, in the embodiment of the present invention, the access control logic based on the comprehensive reputation value is based on the PKI certificate generated by the PKI on the blockchain, and the soil three-level data reputation value access control logic is formulated according to the user identity level and the node comprehensive reputation value (that is, determined according to the initial reputation value, historical reputation value and PKI reputation value described below), and stored in the PIP smart contract to complete the determination of the certificate and node reputation value. Among them, the data of the user's historical access behavior used to determine the initial reputation value is stored in the access node.

[0035] It can be understood that in the embodiment of the present invention, the soil database access control model can jointly perform access control of the soil three-level database based on the user identity attributes (user region and user level) on the access node, the dynamic reputation value (the reputation value level to which the reputation value belongs) and the data sensitivity level in the preset soil database.

[0036] Specifically, multiple credibility levels can be divided according to needs, and users with different credibility levels can access different types of soil data and amounts of soil data, that is, the identity of data accessors can be limited according to the credibility level; the sensitivity levels of soil data can be divided according to needs, and the data types or data amounts of different sensitivity levels are different, that is, the identity of data accessors can be limited according to the sensitivity of the data; the embodiment of the present invention does not limit the specific number of levels of each level.

[0037] Optionally, data types at different sensitivity levels may be updated as required. For example, after a preset period of time, part of the medium sensitivity data is divided into low sensitivity data, which is not specifically limited in the embodiment of the present invention.

[0038] In order to facilitate understanding and explanation of the implementation examples of the present invention, the above-mentioned various levels in the embodiments of the present invention are described by taking three levels as an example, and the specific examples are shown in the following 1-1 to 1-4:

[0039] 1-1: User regions include: provincial, municipal and county levels.

[0040] 1-2: User levels include: advanced, intermediate and low.

[0041] 1-3: Credit levels include: first credit level (C1 level), second credit level (C2 level) and third credit level (C3 level).

[0042] Among them, the first credit level is higher than the second credit level, and the second credit level is higher than the third credit level.

[0043] 1-4: Sensitivity levels include: first sensitivity level (Level I), second sensitivity level (Level II) and third sensitivity level (Level III).

[0044] Among them, the first sensitivity level is higher than the second sensitivity level, and the second sensitivity level is higher than the third sensitivity level.

[0045] S102. The soil database access control model determines the user region and user level on the access node according to the soil database access request, and determines the reputation level of the access node according to the user region, user level and user historical access behavior.

[0046] It should be noted that, in the embodiment of the present invention, the credit level of the access node changes dynamically. Therefore, for the same access user of the same access node, the credit level needs to be re-determined each time the user accesses the node.

[0047] S103. The soil database access control model searches for a matching target access control policy from the access control policy set stored in the soil database access control model according to the reputation level of the access node, the user region and the user level.

[0048] For example, users in each region can only access soil data in that region; provincial users, municipal users and county users correspond to different access policies respectively, and senior users, intermediate users and low-level users in the same region level correspond to different access policies. Users of the same level in the same region level have different access policies for the first, second and third reputation levels.

[0049] For example, users in Province E can access soil data at all city levels under Province E and all county levels under all cities, users at City F can access soil data at all county levels under City F, and users at County G can access soil data at County G.

[0050] For example, for a user at level p in a region at level i on an access node, the access control policy provided in the embodiment of the present invention may include the following three situations:

[0051] Case 1: If the comprehensive reputation value of the access node belongs to the first reputation level, it is determined that the access node can access the first sensitivity level soil data set, the second sensitivity level soil data set and the third sensitivity level soil data set corresponding to the p-th level user in the i-th level region in the soil database;

[0052] Case 2: If the comprehensive reputation value of the access node belongs to the second reputation level, it is determined that the access node can access the second sensitivity level soil data set and the third sensitivity level soil data set corresponding to the p-th level user in the i-th level region in the soil database;

[0053] Case 3: If the comprehensive reputation value of the access node belongs to the third reputation level, it is determined that the access node can access the third sensitive level soil data set corresponding to the p-th level user under the i-th level region in the soil database.

[0054] Optionally, the soil data set may also include soil data surveyor information, and the user on the access node may also request to access the soil data surveyor information.

[0055] (1) The first-level sensitive soil data set accessible to provincial senior users with a comprehensive reputation value of the first level also includes provincial soil data surveying and mapping personnel information;

[0056] (2) The second sensitive level soil data set accessible to city-level intermediate users whose comprehensive reputation value belongs to the second reputation level also includes the information of city-level soil data surveying and mapping personnel;

[0057] (3) The third sensitive level soil data set accessible to low-level county users whose comprehensive credit value belongs to the third credit level also includes the county-level soil data surveying and mapping personnel information.

[0058] Exemplarily, Table 1 is a mapping relationship table between user attribute information and accessible data resources in the soil database. As shown in Table 1, according to the regional level, users can be divided into provincial users, municipal users and county users, and users in each level of region can be further divided into high-level users, intermediate users and low-level users; soil data at each regional level can be divided into high-sensitivity data (i.e., the first sensitivity level), medium-sensitivity data (i.e., the second sensitivity level) and low-sensitivity data (i.e., the third sensitivity level). The specific correspondence can be seen in Table 1.

[0059] Table 1

[0060]

[0061] For example, the specific soil data types in each set in Table 1 are exemplified in the following sets:

[0062] A0={soil available copper, soil available zinc, soil available boron, soil available molybdenum};

[0063] A1={soil available iron, soil available manganese};

[0064] A3={soil cation exchange capacity, soil bulk density, soil available sulfur};

[0065] A4={gravel, soil texture, clay, sand, silt};

[0066] A5={soil organic matter, soil pH, soil total nitrogen, soil total phosphorus, soil total potassium, soil available phosphorus, soil available potassium, and tillage layer thickness}.

[0067] Among them, B1 is provincial-level privacy information, B2 is municipal-level privacy information, and B3 is county-level privacy information.

[0068] Specifically, in the embodiment of the present invention, the access control policy set based on Table 1 can be as shown in Table 2, which is a correspondence table of user level, reputation level and soil three-census data of different sensitivity levels provided by the embodiment of the present invention. Different access control policies are formulated for different regions, and access control based on user attributes is completed in the same region according to the user identity level and reputation level.

[0069] Table 2

[0070]

[0071] In Table 2, taking the i-th level region at the provincial, municipal and county levels as an example, users of the same user level and different credit levels can access different sensitive data. Taking the different credit levels corresponding to senior users, intermediate users and low-level users in the i-th level region as an example, the following 9 situations can be included:

[0072] Case 1: Advanced users in the i-th region and users with the first credit level can access the level I, level II and level III soil census data of the i-th region;

[0073] Case 2: Advanced users in the i-th region and users with the second credibility level can access the level II and level III soil census data in the i-th region;

[0074] Case 3: Advanced users in the i-th region and users with the third credibility level can access the level III soil census data of the i-th region;

[0075] Case 4: Intermediate users in the i-th region and users with the first credit level can access the II-level and III-level soil census data of the i-th region;

[0076] Case 5: Intermediate users in the i-th region and users with the second credibility level can access the level II and level III soil census data of the i-th region;

[0077] Case 6: Intermediate users in the i-th region and users with the third credibility level can access the level III soil census data of the i-th region;

[0078] Case 7: Low-level users in the i-th region and users with the first credit level can access the level III soil census data of the i-th region;

[0079] Case 8: Low-level users in the i-th region and users with the second credibility level can access the level III soil census data of the i-th region;

[0080] Case 9: Low-level users in the i-th region and users of the third credibility level can access the level III soil census data of the i-th region.

[0081] S104. The soil database access control model sends a target access control policy to the soil database, so that the soil database provides the soil data requested by the access node to the access node according to the target access control policy.

[0082] It can be understood that the soil database access control method in the embodiment of the present invention is based on the classification of data sensitivity levels of the soil three-level database, the classification of the region, level of the access user and the credibility level of the access node, based on the improvement of the ABAC model, and makes policy judgments according to the target resource identifier to be accessed, the credibility value level and the PKI system certificate level. Access control policies are formulated in combination with smart contracts to achieve safe and efficient access control.

[0083] For example, Figure 2 A soil database access control system provided by an embodiment of the present invention, such as Figure 2As shown in , the soil database access control model in the soil database access control system includes: PIP, PAP, PEP and PDP; the four functional modules are deployed in the blockchain network in the form of smart contracts. The access node is connected to the PEP node in the soil three-general control model, and the soil three-general database is connected to the PAP node in the soil three-general control model. PEP is used to receive the soil database access request sent by the access node, and the soil database access control model is deployed on the block in the blockchain; PIP is used to determine the user region and user level on the access node according to the soil database access request, and determine the reputation level of the access node according to the user region, user level and user historical access behavior; PDP is used to find a matching target access control policy from the access control policy set stored in the soil database access control model according to the reputation level, user region and user level of the access node. The access control policy set is preset based on the user region, user level, reputation level and sensitivity level of the data in the soil database; PEP is also used to send the target access control policy to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy.

[0084] Specifically, combined Figure 2 The soil database access control system of the present invention, the specific operations performed by the models on each blockchain in the above access control process are as follows, which may include the following 2.1 to 2.8:

[0085] 2.1、Access Node→PEP:{ID,Cert,m x};

[0086] The access node where the user is located initiates a database access request to the PEP contract. The database access request includes: the original user identity information ID, the PKI certificate cert, and the data m requested to be accessed this time. x .

[0087] 2.2. PEP→PIP: {ID,Cert};

[0088] The PEP contract receives the database access request and sends a user attribute information request to the PIP contract based on the database access request;

[0089] The user attribute information request includes: user identity original information ID and PKI certificate cert.

[0090] 2.3. PIP: {Verify(ID,Cert),(C Final ,Cert)→m c}; PIP → PEP: {m c};

[0091] The PIP contract receives the user attribute information request and verifies whether the user identity original information ID in the user attribute information request matches the PKI certificate. If they match, the PIP contract calls the user's historical access behavior of the access node and generates a comprehensive reputation value of the access node, determines the level of the comprehensive reputation value of the access node, and generates the user reputation value attribute m based on the level of the comprehensive reputation value of the access node and the PKI certificate cert. c The PIP contract sends a reputation value attribute information response message to the PEP contract; wherein the reputation value attribute information response message includes the user reputation value attribute m c If there is no match, the PIP contract returns an error message to the PEP contract.

[0092] 2.4、PEP:{m0=Cert+m c};PEP→PDP:{m0};

[0093] The PEP contract receives the reputation value attribute information, generates a database access request m0 based on the user reputation value attribute based on the reputation value attribute information and the PKI certificate cert, and sends the attribute-based database access request m0 to the PDP contract.

[0094] 2.5, PDP→PAP: {m0};

[0095] The PDP contract receives the attribute-based database access request m0 and sends an access policy query request to the PAP contract, wherein the access policy query request includes m0.

[0096] 2.6, PAP: {m0→W}, {W=W pki ,W c}; PAP → PDP: {W};

[0097] The PAP contract obtains the target access control policy set W that matches both the certificate level and the user reputation attribute level, and sends the target access control policy set W to the PDP contract. .

[0098] 2.7. PDP: {Verify (W, m0)}; PDP→PEP: {m1 / m2};

[0099] The PDP contract determines whether to allow access to the access node based on the target access control policy set W and the attribute-based database access request m0, and returns the decision result to the PEP contract.

[0100] 2.8、PEP→Database{m x}; Database → PEP {m x (DATA)}; PEP→Access Node:{m x (DATA)}.

[0101] If the decision result allows access (m1), the PEP contract will request access to the data m x Send it to the soil three-census database, receive the target data provided by the soil three-census database, and provide m to the access node x The corresponding target data; if the decision result is access denied (m2), the PEP contract terminates the access process and returns an error message to the access node. The PEP contract also adjusts the initial reputation value of the access node based on the access result.

[0102] The embodiment of the present invention provides a method for secure access control of soil survey data, wherein a soil database access control model receives a soil database access request sent by an access node, and the soil database access control model is deployed on a block in a blockchain; the soil database access control model determines the user region and user level on the access node according to the soil database access request, and determines the credit level of the access node according to the user region, user level and user historical access behavior; the soil database access control model searches for a matching target access control policy from an access control policy set stored in the soil database access control model according to the credit level, user region and user level of the access node, and the access control policy set is preset based on the user region, user level, credit level and sensitivity level of data in the soil database; the soil database access control model sends the target access control policy to the soil database, so that the soil database provides the access node with the soil data requested by the access node according to the target access control policy. First, the data is divided into different sensitivity levels according to the sensitivity level characteristics of the soil three-census data. The access control policy set of the trusted soil three-census database is preset by regional level, user level, reputation level and data sensitivity level, which can improve the shared security performance of the soil three-census data; second, the access control policy set is deployed on the nodes on the blockchain of the soil database access control model through smart contracts, which can realize automatic safe and efficient access control of access users based on the characteristics of blockchain that cannot be tampered with; third, by performing access control based on the reputation level, different reputation levels can access different data, thereby ensuring the security and efficiency of the soil database access control model in the soil three-census trusted access system.

[0103] Optionally, the soil database access request includes the original user identity information of the access node, the PKI certificate and the data requested for access; further, the above S102 can be executed by the following S102a0:

[0104] S102a0, the soil database access control model verifies the user identity of the access node based on the original user identity information and the PKI certificate. If the contents of the PKI certificate and the original user identity information match successfully, the credibility level of the access node is determined based on the user region and user level in the PKI certificate.

[0105] It should be noted that when a user registers an account, a PKI certificate can be generated based on the user's region, user level, and user ID.

[0106] Based on this solution, access control of users accessing the three soil census data is achieved by utilizing the attribute characteristics of the three soil census data and combining the blockchain to obtain the identity attributes and reputation level of users accessing the nodes. The access policy is obtained based on the low-level logic of the ABAC model combined with the PKI certificate of the PKI system and the dynamic reputation value of the access node, thereby improving the efficiency and security of access control.

[0107] Alternatively, if Figure 3 As shown in FIG. 1 , in the soil survey data security access control method provided by the embodiment of the present invention, the above S102 can be performed by the following S102a to S102c:

[0108] S102a. Determine the initial reputation value, historical reputation value and PKI reputation value of the access node according to the user region, user level and user historical access behavior.

[0109] Among them, the initial reputation value is related to the successful access to soil data of various sensitivity levels in the historical access behavior on the access node, as well as the malicious access to soil data of various sensitivity levels.

[0110] The historical reputation value is related to the comprehensive reputation value after each access in the historical access behavior of the access node, and the total time from making an access request to completing the authorization through policy matching in the historical access behavior.

[0111] The PKI reputation value of the access node is related to the PKI reputation value corresponding to the user's regional level and the PKI reputation value corresponding to the user level.

[0112] S102b. Generate a comprehensive reputation value of the access node based on the initial reputation value, the historical reputation value and the PKI reputation value.

[0113] It can be understood that during the first visit, the initial values ​​of the initial reputation value, historical reputation value and PKI reputation value can be set for calculation. During non-first visit, the initial reputation value, historical reputation value and PKI reputation value can be determined respectively according to the historical access behavior.

[0114] S102c. Determine the reputation level of the access node based on the comprehensive reputation value of the access node.

[0115] It can be understood that by accessing the comprehensive reputation value of the node, it is possible to control the access of visitors of the same user level in the same region to soil data of different sensitivities, which can improve the flexibility and security of access control.

[0116] Illustratively, Table 3 is an exemplary table of a mapping relationship between a comprehensive reputation value and a reputation level provided in an embodiment of the present invention.

[0117] Table 3

[0118]

[0119] For example, taking a provincial-level senior user as an example, different reputation levels can access data of different sensitivity levels, as follows:

[0120] (1) Senior users whose comprehensive credit value belongs to credit level C1 can access soil data resources of level I, level II and level III in the province.

[0121] (2) Senior users whose comprehensive credit value belongs to credit level C2 can access level II and level III soil data resources in the province.

[0122] (3) Senior users whose comprehensive credit value belongs to credit level C3 can access the soil data resources of level III in the province.

[0123] Based on this solution, since the comprehensive reputation value is divided into three intervals, it is possible to distinguish whether the accessing user is a good user based on the reputation value, while meeting strict user level regulations to prevent the situation where the reputation value of a low-level user is higher than that of a high-level user. Different access control policies are set for each reputation level to authorize the visitor.

[0124] Optionally, in the soil survey data security access control method provided in the embodiment of the present invention, the above S102 may include the following S102b1, S102b2, S102b3 and S102b4:

[0125] S102b1, determining an initial reputation value of the access node based on formula (1), the number of successful accesses to the access node, the number of malicious accesses to the access node by users, and the total number of categories of data levels accessible to users of the access node.

[0126] Formula (1)

[0127] Among them, m represents the total number of data regional levels, and n represents the total number of data sensitivity levels. represents the weight of successful access of the access node to the soil data of the jth sensitivity level in the i-th region, represents the number of successful accesses by the access node to the soil data of the jth sensitivity level in the i-th region, represents the malicious access weight of soil data of the jth sensitivity level in the i-th region, represents the number of malicious accesses by the access node to soil data of the jth sensitivity level in the i-th region, , , m and n are both positive integers, i is a positive integer less than m, and j is a positive integer less than n.

[0128] It can be understood that the initial reputation value of the access node can be accurately determined by formula (1). Since it is based on the number of historical access successes and failures of the access node for different regions and different sensitivity levels, the initial reputation value of the node can be accurately described based on the historical access situation.

[0129] S102b2, based on formula (2), the comprehensive reputation value of each visit of the access node before the current visit, and the total time from the access node making an access request to the policy matching and completing the authorization before the current visit, determine the historical reputation value of the access node.

[0130] Formula (2)

[0131] Among them, K represents the total number of historical visits to the node, It represents the total time from the time the access request is made to the time the policy is matched and the authorization is completed for the kth access of the access node. Indicates the access node The comprehensive reputation value at the end of the visit, K is a positive integer, and k is a positive integer less than K.

[0132] It is understandable that the historical reputation value of the access node can be determined based on the historical number of visits to the access node, the response time of each successful historical visit, and the comprehensive reputation value after each visit to the node.

[0133] In the embodiment of the present invention, after the access node obtains the initial authorization, a historical reputation value is generated. As time goes by and the number of user authorizations increases, the user reputation value may need to be adjusted over time.

[0134] S102b3. Based on formula (3), user region and user level, determine the PKI reputation value of the access node.

[0135] Formula (3)

[0136] in, Indicates the PKI reputation weight of the i-th level regional user, Indicates the PKI reputation value of users in the i-th level region, It represents the PKI reputation weight of the qth level user among the ith level regional users. The PKI reputation value of the qth level user in the i-th level region, where q is a positive integer.

[0137] The PKI reputation value is generated based on the access node identity authentication and is related to the regional level and user level of the user on the node. Among them, the PKI reputation value of the i-th level regional user and the PKI reputation value of the q-th level user in the i-th level regional user are the same as the preset constant, which is not specifically limited in the embodiment of the present invention.

[0138] Figure 4 A schematic diagram of a master-slave multi-chain PKI model provided by an embodiment of the present invention is as follows: Figure 4 As shown in the figure, it is a master-slave multi-chain blockchain architecture based on the regional level of user node distribution. The master chain is composed of provincial nodes, and each slave chain is composed of lower-level city and county nodes of the corresponding province. Provincial nodes manage city nodes, and city nodes manage county nodes. Each slave chain represents a province. The root certificate authority (RCA) corresponds to the provincial node. An RCA server is configured in each domain to be responsible for the overall certificate management of the domain. The CA server decides whether to add it based on the efficiency of certificate distribution in the slave chain. The CA is issued by the RCA and generally corresponds to the city node. The CA can also issue certificates to application service providers, users, and domain servers, and is responsible for the daily management of certificates. The city and county chain contains certificates of city and county nodes, and the provincial chain contains certificates of provincial nodes. The identity certificates are distributed to user nodes through smart contracts. RCA and CA interact and reach consensus on information from different domains in the form of CA nodes on the chain to jointly maintain the blockchain network.

[0139] S102b4. Generate a comprehensive reputation value based on formula (4), the initial reputation value of the access node, the historical reputation value of the access node, and the PKI reputation value of the access node.

[0140] Formula (4)

[0141] Where a represents the weight of the initial reputation value of the access node, b represents the weight of the historical reputation value of the access node, and c represents the weight of the PKI reputation value of the access node. ,and .

[0142] Based on this scheme, a PKI system strategy integrating user reputation evaluation is proposed. The direct reputation of the access node is calculated according to the historical access behavior of the access node and the certificate level generated by the PKI system. When the access node performs malicious access, the user's reputation will be reduced. The comprehensive reputation of the access node can be accurately determined based on the initial reputation value of the access node, the historical reputation value of the access node, the PKI reputation value of the access node and the above formula. Even if the soil three-census data has high privacy and huge data volume, the security of the data in the data sharing process can be guaranteed, the user's behavior can be distinguished, and it can be judged whether the user meets the soil three-census user classification regulations, so that the corresponding sensitivity database can be opened for the user of the access node based on the comprehensive reputation value.

[0143] Corresponding to the above-mentioned method embodiments, the present invention also provides embodiments of a soil census data security access control system and a computer device used therein.

[0144] The embodiments of the soil census data security access control system of the present invention can be applied to computer devices, such as servers or terminal devices. The soil census data security access control system embodiments can be implemented by software, or by hardware or a combination of software and hardware. Taking software implementation as an example, as a logically sensed soil census data security access control system, the processor of the node where it is located reads the corresponding computer program instructions in the non-volatile memory into the memory and runs it. From the hardware level, if Figure 5 As shown in FIG. 1 , a hardware structure diagram of a computer device where a soil survey data security access control system according to an embodiment of the present invention is located is shown in FIG. Figure 5 In addition to the processor 510, memory 530, network interface 520, and non-volatile memory 540 shown, the server or electronic device where the soil census data security access control system 531 is located in the embodiment may also include other hardware, usually according to the actual function of the computer device, which will not be described in detail.

[0145] Correspondingly, the present invention also provides a secure access control node for soil census data, the access control node comprising a processor; a memory for storing processor executable instructions; wherein the processor is configured to: execute the steps of the secure access control method for soil census data executed by the above-mentioned controller.

[0146] In one embodiment, a computer device is provided, including: a memory and a processor, wherein the memory stores a computer program, and when the processor executes the computer program, any step in the above-mentioned soil census data security access control method is implemented.

[0147] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a processor, any step in the above soil census data security access control method can be implemented.

[0148] The implementation process of the functions and effects of each module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, which will not be repeated here.

[0149] For the device embodiment, since it basically corresponds to the method embodiment, the relevant parts can refer to the partial description of the method embodiment. The device embodiment described above is only schematic, wherein the modules described as separate components may or may not be physically separated, and the components displayed as modules may or may not be physical modules, that is, they may be located in one place, or they may be distributed on multiple network modules. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of the present invention. Those of ordinary skill in the art can understand and implement it without paying creative labor.

[0150] The above describes specific embodiments of the present invention. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the accompanying drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0151] Those skilled in the art will readily appreciate other embodiments of the invention after considering the specification and practicing the invention claimed herein. The invention is intended to cover any variations, uses or adaptations of the invention that follow the general principles of the invention and include common knowledge or customary techniques in the art not claimed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of the invention are indicated by the following claims.

[0152] It should be understood that the present invention is not limited to the exact construction that has been described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present invention is limited only by the appended claims.

[0153] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A soil survey data security access control method, characterized in that: The method comprises: The soil database access control model receives a soil database access request sent by an access node, wherein the soil database access control model is deployed on a block in the blockchain; The soil database access control model determines the user region and user level on the access node according to the soil database access request, and determines the reputation level of the access node according to the user region, the user level and the user's historical access behavior on the access node; The step of determining the reputation level of the access node according to the user region, the user level, and the user's historical access behavior on the access node includes: Determine the initial reputation value, historical reputation value and public key infrastructure (PKI) reputation value of the access node according to the user region, the user level and the user's historical access behavior; generate a comprehensive reputation value of the access node according to the initial reputation value, the historical reputation value and the PKI reputation value; determine the reputation level of the access node according to the comprehensive reputation value of the access node; wherein, the reputation levels of the access nodes are different, and visitors of the same user level in the same region can access soil data of different sensitivities; The soil database access control model searches for a matching target access control policy from an access control policy set stored in the soil database access control model according to the reputation level of the access node, the user region and the user level, wherein the access control policy set is preset based on the user region, the user level, the reputation level and the sensitivity level of the data in the soil database; The soil database access control model sends the target access control policy to the soil database so that the soil database provides the soil data requested by the access node to the access node according to the target access control policy.

2. The method according to claim 1, characterized in that The soil database access request includes the user identity original information of the access node, the PKI certificate and the soil data requested for access; Determining the reputation level of the access node according to the user region, the user level and the user's historical access behavior includes: The soil database access control model verifies the user identity of the access node based on the original user identity information and the PKI certificate. If the contents of the PKI certificate and the original user identity information match successfully, the credibility level of the access node is determined based on the user region, the user level and the user's historical access behavior in the PKI certificate.

3. The method according to claim 1, characterized in that Determining the initial reputation value of the access node includes: Determine the initial reputation value of the access node based on a first preset formula, the number of successful accesses to the access node, the number of malicious accesses by users of the access node, and the total number of categories of user-accessible data levels of the access node; The first preset formula includes: Among them, m represents the total number of data regional levels, n represents the total number of data sensitivity levels, and α ij represents the weight of the access node's successful access to soil data of the jth sensitivity level in the i-th region, S ij represents the number of successful accesses of the access node to the soil data of the jth sensitivity level in the i-th region, β ij represents the malicious access weight of soil data of the jth sensitivity level in the i-th region, F ij represents the number of malicious accesses by the access node to soil data of the jth sensitivity level in the i-th region, Both m and n are positive integers, i is a positive integer less than m, and j is a positive integer less than n.

4. The method according to claim 1 or 3, characterized in that: Determining the historical reputation value of the access node includes: Determine the historical reputation value of the access node based on the second preset formula, the comprehensive reputation value of each access completed by the access node before the current access, and the total time from the access request to the policy matching and authorization completion of each access request by the access node before the current access; The second preset formula includes: Where K represents the total number of historical visits to the access node, t k represents the total time from the kth access request to the policy matching and authorization completion of the access node, C Current It represents the comprehensive reputation value of the access node at the end of the k-th visit, K is a positive integer, and k is a positive integer less than K.

5. The method according to claim 4, characterized in that Determining the PKI reputation value of the access node includes: Determine the PKI reputation value of the access node based on a third preset formula, the user region and the user level; The third preset formula includes: pki =γ i ·C i +δ iq ·C iq ; Among them, γ i represents the PKI reputation weight of the i-th level regional user, C i represents the PKI reputation value of the user in the i-th level region, δ iq represents the PKI reputation weight of the qth level user among the i-th level regional users, C iq It represents the PKI reputation value of the qth level user in the ith level region, where q is a positive integer.

6. The method according to claim 5, characterized in that The generating the comprehensive reputation value according to the initial reputation value, the initial reputation value and the PKI reputation value comprises: Generate the comprehensive reputation value based on a fourth preset formula, the initial reputation value of the access node, the historical reputation value of the access node, and the PKI reputation value of the access node; The fourth preset formula includes: final =a·C origin +b·C History +c·C pki ; Among them, a represents the weight of the initial reputation value of the access node, b represents the weight of the historical reputation value of the access node, c represents the weight of the PKI reputation value of the access node, a+b+c=1, and c>a>b.

7. The method according to claim 5, characterized in that The user region on the access node is the i-th region, and the user level is the p-th level; the soil database access control model searches for a matching target access control policy from the access control policy set stored in the soil database access control model according to the reputation level, the user region, and the user level, including: If the comprehensive reputation value belongs to the first reputation level, it is determined that the access node can access the first type of soil data set, the second type of soil data set and the third type of soil data set corresponding to the p-th level user in the i-th level region in the soil database; If the comprehensive reputation value belongs to the second reputation level, it is determined that the access node can access the first type of soil data set and the second type of soil data set corresponding to the p-th level user in the i-th level region in the soil database; If the comprehensive reputation value belongs to the third reputation level, it is determined that the access node can access the first type of soil data set corresponding to the p-th level user in the i-th level region in the soil database; The first credit rating is lower than the second credit rating, and the second credit rating is lower than the third credit rating.

8. The method according to claim 7, characterized in that The user regions include provincial, municipal and county levels, and the user levels include high, medium and low levels; wherein, The first sensitive level soil data set accessible to provincial senior users whose comprehensive reputation value belongs to the first reputation level also includes provincial soil data surveying and mapping personnel information; The second sensitive level soil data set accessible to the city-level intermediate user with a comprehensive reputation value belonging to the second reputation level also includes the city-level soil data surveying and mapping personnel information; The third sensitive level soil data set accessible to the third reputation level by the county-level low-level user with a comprehensive reputation value also includes county-level soil data surveying and mapping personnel information; The first sensitivity level is higher than the second sensitivity level, and the second sensitivity level is higher than the third sensitivity level.

9. A soil survey data security access control system, characterized in that: The soil survey data security access control system includes a soil database access control model based on blockchain, and the soil database access control model includes: a policy execution point PEP, a policy information point PIP, a policy decision point PDP and a policy management point PAP; the soil database access control model is deployed on a block in the blockchain; The PEP is used to receive a soil database access request sent by an access node; The PIP is used to determine the user region and user level on the access node according to the soil database access request, and determine the reputation level of the access node according to the user region, the user level and the user's historical access behavior on the access node; The PIP is specifically used to: determine the initial reputation value, historical reputation value and public key infrastructure (PKI) reputation value of the access node according to the user region, the user level and the user's historical access behavior; generate the comprehensive reputation value of the access node according to the initial reputation value, the historical reputation value and the PKI reputation value; determine the reputation level of the access node according to the comprehensive reputation value of the access node; wherein, the reputation level of the access node is different, and visitors with the same user level in the same region can access soil data with different sensitivities; The PDP is used to search for a matching target access control policy from an access control policy set stored in the soil database access control model according to the reputation level of the access node, the user region and the user level, wherein the access control policy set is preset based on the user region, the user level, the reputation level and the sensitivity level of the data in the soil database; The PEP is also used to send the target access control policy to the soil database, so that the soil database provides the soil data requested by the access node to the access node according to the target access control policy.

Images