网络第三方服务器中用户信息的细粒度访问控制方法

针对传统访问控制方法存在的访问控制粒度粗、访问效率低、实用性差的问题,提出一种新的网络第三方服务器中用户信息的细粒度访问控制方法。分析了整体方案设计过程,以分组与联系度两个属性为例对细粒度进行刻画。通过初始化阶段、加密阶段、密钥生成阶段、解密阶段和传输阶段实现属性基加密。在非分组成员向用户信息发出访问请求时,网络第三方服务器通过当前关系图,依据Dijkstra法确定成员的信任距离,如果该信任距离能够达到既定阈值,则网络第三方服务器向密钥生成中心提供参数以实现密钥解密,从而实现用户信息的细粒度访问控制。实验结果表明,所提方法效率高、访问控制能力和实用性强。

Fine grained access control method for user information in network third party server

In view of the existing control methods of traditional access control of coarse grain size, low efficiency, poor access to practical problems, fine-grained access control method is proposed for the new user network third party server information. The whole design process is analyzed, and the fine granularity is depicted by two attributes of grouping and connection degree. Attribute base encryption is achieved through initialization phase, encryption phase, key generation stage, decryption phase and transmission phase. An access request is issued to the user information in the non group members, third party network server through the current graph, trust members are determined based on the Dijkstra distance method, if the trust distance can reach the preset threshold, then the network server to the third party key generation center to realize the decryption key parameter to achieve fine-grained access control of user information. Experimental results show that the proposed method is efficient, accessible and practical.