Blockchain-Based Cross-domain Access Control Mechanism
Ming Tan, Xiaohan Wang, Siyuan Shang, Aodi Liu · 2022
In view of the problems of high application cost, opaque permission judgment process, mutual trust between domains, and difficulty in coordinating access control information of data resources in distributed environment, this paper proposes a blockchain-based cross-domain access control mechanism that supports inter-domain policy privacy protection, so as to achieve cross-domain secure sharing of data in the centerless mode. First, based on attribute-based access control, access control information such as policies and attributes is stored on the blockchain to achieve efficient distributed permission management; At the same time, an inter-domain policy privacy protection method based on SM4 and CP-ABE is designed to protect the privacy of access control policies between domains. Subsequently, the smart contract is used to realize the distributed trusted judgment of access control based on the on-chain permission information; Finally, compared with the existing cross-domain access control mechanism, it is verified that the proposed mechanism in this paper has certain advantages and good scalability, and can provide strong support for cross-domain data security access in a distributed environment.