Method and system for cryptographic attribute-based access control supporting dynamic rules

Abstract

The present invention mainly relates to the field of information technology, and specifically to a method and system for cryptographic attribute-based access control supporting dynamic rules. In the system, the protected object is stored in an encrypted form, only the access request satisfying the access policy in attribute-based access control can be authorized to decrypt the object, which ensures that the access to data in an unsecure environment can be authorized according to a security policy, and supports dynamic policy and real-time authorization of attributes. The method and system for cryptographic attribute-based access control supporting dynamic rules in this invention have already separated from traditional encryption system framework, are totally new attribute-based access control model, method and system supporting cryptographic determination, can achieve more secure, diversified, dynamic and flexible access authorization, are suitable for large-scale organizations or information systems, and can be applied to the environments such as Cloud computing, grid computing, and distributed computing.