一种针对层次结构的安全动态存取控制方案

一、前言在多用户计算机系统中,经授权对共享资源进行存取控制是很重要的。存取控制问题可以用一种用户层次结构描述。层次结构中的存取控制问题本质上是密钥分配方案的选择问题。 1983年,AKL和TAYLOR首先给出了一种基于层次结构的存取控制方案。在该方案中,在t_i整除t_j(记为t_i/t_j)的前提下,当且仅当sc_j≤sc_i,可为每一个安全类分配一可公开的整数t_i,那么,sc_i可按sk_i=(mod m)sk_(o~i)~t计算出密钥sk_i。这里sk_o是认证中心(CA)密钥;m是一对保密的大素数的积。

A Secure Dynamic Access Control Scheme for the Hierarchy Structure

Based on both the Rabin's scheme and the Chinese remainder theorem, this paper presents a secure accesscontrol scheme for the hierarchy structure. Compared to the existing access control schemes, the scheme's key gener-ation algorithm and derivation algorithm of successor's keys are simple. In the scheme, the predecessor not only canefficiently derive secret keys of its successors, but also can withstand the attack of collusion. The scheme's dynamicfeature is perfect. Moreover, each security class in hierarchy structure can freely select/change his own key withoutaltering other keys present in the system.