一种基于离散对数和多项式插值的访问控制方案

An Access Control Scheme Based on Discrete Logarithms and Polynomial Interpolations

在这篇文章中,通过对Tzer-Shyong Chen等人和其他访问控制方案的研究,结合方案的实际应用,提出了一种新的层级结构下信息访问控制方案,主要从提高安全性、减少计算量、节省存储空间等方面作为方案设计的主要依据,新方案更加适合现实的应用。对用户类的增加/删除,用户类关系的增加/删除,用户类秘密密钥的变更等动态的存取控制问题也进行了讨论。该方案在实际的应用中更适合用户类对直接下级用户类秘密密钥的获取,同时也提出了对间接下级用户类秘密密钥的获取方式。并且对安全性、计算量和存储等方面进行了分析。

This paper presents a new access control scheme based on Tzer-Shyong Chen et al.'scheme.Design of the scheme mainly focuses on security,computation quantity and storage.The dynamic access control problems,such as,adding/deleting user classes,adding/deleting user relationships,and changing secret keys,are discussed.In scheme,a user class can get the secret key of its immediate successor more efficiently.Also,a method by which a user class derives the secret key of its indirect successor is proposed.Security,computation quantity,storage are analyzed at the end of the paper.