A Study on Current Research and Challenges in Attribute-based Access Control Model

Vijayalakshmi, K.; Jayalakshmi, V.

doi:10.1007/978-981-16-7610-9_2

Cited by 10 publications

(1 citation statement)

References 47 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There have been prior studies on the integration of the consortium blockchain and ABAC. However, it's important to note that the ABAC model can potentially suffer from policy conflicts, which arise when multiple policies are matched against an access request but lead to different decisions [9] . The existing research on the combination of consortium blockchain and ABAC model didn't focus on discussing and analyzing potential policy conflicts of ABAC on the consortium blockchain.…”

Section: Introductionmentioning

confidence: 99%

A method of attribute-based access control based on consortium blockchain and smart contract

Zheng,

2024

Third International Conference on Electronic Information Engineering, Big Data, and Computer Technology (EIBDCT 2024)

View full text Add to dashboard Cite

In order to ensure the security of data access, correlative control and operational auditing are critical. After years of development, access control models with different properties have been applied under different conditions. However, the centralized access control model has defects such as single-point failure threats and poor scalability. As an emerging distributed data management technology, blockchain can make up for these shortcomings with its advantages of openness, transparency and traceability of operations, and can achieve audit goals. Given the characteristics of blockchain and smart contracts, we design and implement an attribute-based access control model based on the consortium blockchain and smart contracts. Moreover, considering potential policy conflicts, we add two different policy conflict handling methods based on smart contracts to enhance the security of the model. Finally, we tested the main interfaces of the model under different loads. We find that adding a policy conflict handling module will cause extra performance loss. Therefore, choosing suitable conflict handling method based on the application scenario is worth considering.

show abstract

Section: Introductionmentioning

confidence: 99%