5 results about "XACML" patented technology

The present invention provides an access control policy conflict detection method based on XACML, comprising: step 1, establishing a policy tree based on rules, policies, and policy sets; step 2, establishing an index structure based on the established policy tree and the effects of the rules; step 3, obtaining the rules in the policy to be detected, and comparing the rules one by one with rules in different policy trees with opposite effects; step 4, if the comparison result is an intersection, it indicates that the rule pair conflicts, and the rule pair is stored in a queue to be output, and steps 3 and 4 are repeated until all rules in the policy to be detected are compared, and all rule pairs in the queue to be output are output. The solution proposed by the present invention adopts a new policy index structure based on expression tree comparison, which can realize conflict detection of complex policies and mark the causes of conflicts. Users can flexibly configure and resolve policy conflicts based on conflict markers to achieve efficient and accurate policy management and control.

The application relates to the technical field of judicial data security, and discloses a method for safely transferring classified data in a judicial system based on a blockchain technology. Multi-source judicial data is collected, sensitive information is identified through a large language model, and differential privacy desensitization processing is adopted; an SM4 encryption and a TLS 1.3 end-to-end security channel are constructed, data hash fingerprints are generated, and the data are written into a consortium chain for storage based on a PBFT consensus mechanism; a multi-modal classification engine is designed to extract features and intelligently classify; a hybrid permission model is established to integrate XACML policies and Kafka queues, and a dynamic permission control is implemented in combination with an RBAC / ABAC mechanism; a hierarchical encryption storage architecture is constructed, homomorphic encryption retrieval and erasure code distributed storage are adopted; a judicial knowledge graph is constructed based on a BERT model; a blockchain audit system is deployed in combination with an LSTM anomaly detection and a DREAD risk assessment model to form a closed-loop risk control system. The application solves the problems of security risks and privacy leakage in the cross-departmental transfer of judicial data.

This invention discloses a method and system for automated policy deduction based on descriptive logic, comprising: creating a structured policy; storing the structured policy as an XACML format policy; translating the XACML format policy into a formal policy; converting the formal policy into a concrete policy according to the policy objective interpretation environment to be implemented; instantiating the concrete policy, generating instances of policy objects, and distributing them to actual devices for execution. This invention, through formal security policy expression, utilizes a policy center to achieve automated deduction, decision-making, and execution of security policies, effectively reducing the difficulty of policy management for administrators and improving security management efficiency.

The application discloses a kind of compatible XACML standard's trusted access control method and system, belong to access control technical field, the trusted access control method conforms to the XACML standard popular in industry, adopts the policy decision point of decentralization realized by block chain technology, eliminates the mutual distrust between different organizations, guarantee the trusted of access request verification result, to realize the trusted access across organization;With the access control function conforms to the XACML standard popular in industry, the specific implementation can reuse XACML policy decision point, policy enforcement point related open source code, and the deployment access control function is low in cost;Block chain is based on the read-write separation characteristics of XACML policy decision point, with low redundancy parallel execution request verification task, make full use of the computing capacity of block chain node, reduce the request verification overhead, improve the block chain throughput.

The invention discloses an authority management method based on a multi-mode mixed strategy, and the method comprises the steps: introducing a hierarchical decision architecture, the architecture comprises three hierarchies, a first-level PDP carries out the strategy matching and authority verification through employing an XACML rule, and is used for processing a conventional authority request, and determining whether the access is allowed or not; the second-level PDP adopts a reinforcement learning model to process a multi-attribute conflict scene; and the third-level PDP optimizes the permission propagation path between the devices by using graph calculation and hypergraph calculation technologies. The method aims at solving the efficiency problem of processing multi-attribute conflicts and large-scale equipment interconnection scenes in a dynamic environment in an existing authority management system, improving the performance and the real-time performance of the system under a high-load condition, and ensuring the safety and the compliance under cross-tenant and complex scenes. Meanwhile, by dynamically adjusting the attribute weight, the authority decision process is optimized, and the defects in cross-tenant data sharing and large-scale equipment interconnection in the prior art are overcome.