基于MPT建模的属性访问控制策略

MPT modeling based on attribute access control strategy

针对基于属性访问控制中复杂的属性工程,在以太坊底层使用的数据存储结构的MPT(Merkle Patricia tree)方法基础上进行部分安全性扩展,将离散属性建模成统一的MPT属性集,然后通过默克尔证明方法确保属性集的完整性。为了保证属性隐私不会被泄露以及增强MPT属性体系在分布式环境下的安全性,使用公开密钥体制的椭圆曲线加密算法对属性值进行处理。此外,将MPT属性集以数据库的方式存储,实现动态的属性操作。理论分析和实验结果表明该策略能解决属性工程的完整性和安全性问题,也使得基于属性的访问控制在分布式环境中易于实施。

For complex attribute engineering based on attribute access control,this paper performed partial security expansion is based on the MPT(Merkle Patricia tree)method of the data storage structure used at the bottom of Ethereum,modeled discrete attributes into a unified MPT attribute set,and then Merkle proof method ensured the integrity of the attribute set.In order to ensure that the attribute privacy will not be leaked and enhance the security of the MPT attribute system in a distributed environment,it used the elliptic curve encryption algorithm of the public key system to process the attribute value.In addition,this article stored the MPT attribute set in a database to implement dynamic attribute operations.Theoretical analysis and experimental results show that this strategy can solve the integrity and security problems of attribute engineering,and makes attribute-based access control easy to implement in a distributed environment.