An efficient privacy‐enhanced attribute‐based access control mechanism

Summary Owing to the rapid progress of network researching, attribute‐based access control (ABAC) has attracted more and more attention due to its appreciable expressiveness, flexibility, and scalability. Unfortunately, collecting user attributes is necessary to complete the standard ABAC decision p...

Full description

Saved in:
Bibliographic Details
Published inConcurrency and computation Vol. 32; no. 5
Main Authors Xu, Yang, Zeng, Quanrun, Wang, Guojun, Zhang, Cheng, Ren, Ju, Zhang, Yaoxue
Format Journal Article
LanguageEnglish
Published Hoboken Wiley Subscription Services, Inc 10.03.2020
Subjects
Access control
attribute‐based access control
binary search tree
digital signature
Privacy
security
Online AccessGet full text

Cover

More Information
Summary:Summary Owing to the rapid progress of network researching, attribute‐based access control (ABAC) has attracted more and more attention due to its appreciable expressiveness, flexibility, and scalability. Unfortunately, collecting user attributes is necessary to complete the standard ABAC decision process, which increases the risk of privacy disclosure. This problem increases public doubts about ABAC and hinders its popularization. In this paper, a privacy‐protected and efficient attribute‐based access control (EPABAC) scheme is proposed to prevent the privacy leakage of access subject in the decision‐making process of ABAC by introducing a novel hash‐based binary search tree. The analyses and experimental evaluations show that the EPABAC achieves user privacy protection in the decision‐making process with acceptable additional computing overhead.
ISSN:1532-0626
1532-0634
DOI:10.1002/cpe.5556