Simplifying Access Policy Descriptions with Level Relationships between Attributes
Xiangwu Ding, Wangsheng Wang, Jiale Feng · 2022
Blockchain combined with distributed file system for storing data usually encounters the challenges of sensitive data protection and secure access control, and ABE can achieve access control to confidential data. However, an excessive number of attributes in an access policy can lead to a very complex access policy description. To solve the problem of complex access policy descriptions, this paper proposes an access control scheme that utilizes the level relationship between attributes to simplify the access policy descriptions and combines blockchain to protect the security of encrypted data. This scheme encrypts data through CP-ABE. When formulating the access policy, the level relationship between the attributes involved in the access policy is analyzed and the attribute level structure is constructed to simplify the access policy descriptions. A smart contract is constructed to store the data hash and attribute ciphertext in the blockchain to avoid malicious tampering of data. Build a cross-regional first-time ID card claiming consortium blockchain through FISCO BCOS and build IPFS cluster. Through experiments, the feasibility and effectiveness of the scheme are verified.