The application discloses a kind of based on
blockchain's pedigree data dynamic permission
access control system and method, rely on attribute-based
access control paradigm, and combine pedigree
data access constraint to carry out dynamic
access control.First, user sends access request to
policy decision point;Decision point according to the policy loaded from policy management point, request
relevant information to
blockchain, and call user historical behavior
verification module based on pedigree data, the legality of current access request is verified using dependency relationship and pedigree
data graph.
System administrator records access request and
verification result to
blockchain, to support the fast
verification of same query, reduce query overhead.In addition, the
system passes access information such as query user, time, result, operation content to management node, for subsequent user access tracking and management.The method uses the
anonymity and non-tamperability of blockchain, provides strong evidence for user supervision, realizes efficient management and reasoning to source information.