网络第三方服务器中用户信息的细粒度访问控制方法  

Fine Grained Access Control Method for User Information in Network Third Party Server

作　　者：杨浩 张俊锋 谢昕[2] 

机构地区：[1]国网江西省电力公司电力科学研究院,南昌330096 [2]华东交通大学信息工程学院,南昌330013

出　　处：《科学技术与工程》2018年第4期82-87,共6页Science Technology and Engineering

基　　金：国家自然科学基金(41402290;61762037);江西省科技厅工业支撑计划(20151BBE50055);南昌市优势科技创新团队(2016T75);江西省研究生创新专项资金(YC2015-S254)资助

摘　　要：针对传统访问控制方法存在的访问控制粒度粗、访问效率低、实用性差的问题,提出一种新的网络第三方服务器中用户信息的细粒度访问控制方法。分析了整体方案设计过程,以分组与联系度两个属性为例对细粒度进行刻画。通过初始化阶段、加密阶段、密钥生成阶段、解密阶段和传输阶段实现属性基加密。在非分组成员向用户信息发出访问请求时,网络第三方服务器通过当前关系图,依据Dijkstra法确定成员的信任距离,如果该信任距离能够达到既定阈值,则网络第三方服务器向密钥生成中心提供参数以实现密钥解密,从而实现用户信息的细粒度访问控制。实验结果表明,所提方法效率高、访问控制能力和实用性强。In view of the existing control methods of traditional access control of coarse grain size,low efficiency,poor access to practical problems,fine-grained access control method is proposed for the new user network third party server information. The whole design process is analyzed,and the fine granularity is depicted by two attributes of grouping and connection degree. Attribute base encryption is achieved through initialization phase,encryption phase,key generation stage,decryption phase and transmission phase. An access request is issued to the user information in the non group members,third party network server through the current graph,trust members are determined based on the Dijkstra distance method,if the trust distance can reach the preset threshold,then the network server to the third party key generation center to realize the decryption key parameter to achieve fine-grained access control of user information. Experimental results show that the proposed method is efficient,accessible and practical.

关 键 词：网络 第三方服务器 用户信息 细粒度 访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]