一种基于隐藏证书的复合访问控制策略

引入隐藏证书技术提出一种复合访问控制策略HCBC-CP,结合资源访问方与资源拥有方的用户、角色、权限间的映射关系,给出了相应的模型以及协议过程.利用复合访问策略形成的表达式对信息传递过程中的策略、敏感信息以及证书进行保护.模型协议过程表明该策略模型具有较高的安全保密性和效率可行性.

A Hidden Credential Based Composite Access Control Policy

This paper presents a hidden credentials based composite access control policy,which is called HCBC-CP,the article puts forward a corresponding process model and protocols with the resource access between the user,role and permission.The information transfer process,such as strategy,sensitive information,certificates,etc.are protected with composite access policies.Model agreement process shows that the policy model has a high feasibility of security and efficiency.