4 results about "XACML" patented technology

The application relates to the technical field of judicial data security, and discloses a method for safely transferring classified data in a judicial system based on a blockchain technology. Multi-source judicial data is collected, sensitive information is identified through a large language model, and differential privacy desensitization processing is adopted; an SM4 encryption and a TLS 1.3 end-to-end security channel are constructed, data hash fingerprints are generated, and the data are written into a consortium chain for storage based on a PBFT consensus mechanism; a multi-modal classification engine is designed to extract features and intelligently classify; a hybrid permission model is established to integrate XACML policies and Kafka queues, and a dynamic permission control is implemented in combination with an RBAC / ABAC mechanism; a hierarchical encryption storage architecture is constructed, homomorphic encryption retrieval and erasure code distributed storage are adopted; a judicial knowledge graph is constructed based on a BERT model; a blockchain audit system is deployed in combination with an LSTM anomaly detection and a DREAD risk assessment model to form a closed-loop risk control system. The application solves the problems of security risks and privacy leakage in the cross-departmental transfer of judicial data.

This invention discloses a method and system for automated policy deduction based on descriptive logic, comprising: creating a structured policy; storing the structured policy as an XACML format policy; translating the XACML format policy into a formal policy; converting the formal policy into a concrete policy according to the policy objective interpretation environment to be implemented; instantiating the concrete policy, generating instances of policy objects, and distributing them to actual devices for execution. This invention, through formal security policy expression, utilizes a policy center to achieve automated deduction, decision-making, and execution of security policies, effectively reducing the difficulty of policy management for administrators and improving security management efficiency.

The application discloses a kind of compatible XACML standard's trusted access control method and system, belong to access control technical field, the trusted access control method conforms to the XACML standard popular in industry, adopts the policy decision point of decentralization realized by block chain technology, eliminates the mutual distrust between different organizations, guarantee the trusted of access request verification result, to realize the trusted access across organization;With the access control function conforms to the XACML standard popular in industry, the specific implementation can reuse XACML policy decision point, policy enforcement point related open source code, and the deployment access control function is low in cost;Block chain is based on the read-write separation characteristics of XACML policy decision point, with low redundancy parallel execution request verification task, make full use of the computing capacity of block chain node, reduce the request verification overhead, improve the block chain throughput.