Efficient Binary-Encoding Access Control Policy Combination for Large-Scale Collaborative Scenarios

摘要

Collaboration among organizations is an important part in an e-business or e-health service. In this case, it is necessary for each organization to share their data with each other in order to provide better services. However, each organization may have specified a set of secure access control policies for shared data, resulting in policy conflicts or differences in a collaboration scenario. Therefore, it is critical to generate an integrated global access control policy for shared common data. Due to low efficiency queries and large memory space, current approaches in security policy integration cannot be applied to large-scale collaboration scenarios. In this paper, we present a binary-encoding policy integration method that can quickly seek the combinable rule sets and easily merge single access control policy into a global policy set. The main idea is that first each policy is converted to a triple, namely <;attribute, action, constraint>, then to encode all attributes and actions in each rule in a binary form, after that to shift and weighted code so as to get combined attribute code, finally to sort code and merge rules. Compared with similar researches, our work can reduce the integration time by 34% and the integration time is stable as the number of attributes increases, hence quite suitable for the large-scale collaborative scenarios.