The ABAC model currently has a wide range of application scenarios, such as cloud environments, the Internet of Things, and fine-grained access control for NoSQL databases. Although the use of attribute-based control techniques can solve problems such as insufficient access control granularity, it immediately brings the problem of inefficient access control. In this paper, we design a new ABAC policy matching algorithm, when the guest sends an access request, we first filter out the access requests that are unlikely to be decided using a cuckoo filter and reject the access request directly. If the access request passes the filter, then the policy that can match the access request is found through the primary index table and secondary index table of the policy and the decision result is given. Experiments prove that the algorithm performs best in the worst case and performs well in the general case, and can greatly improve the efficiency of attribute-based access control.
Optimization of attribute-based access control policy with priority filtering
2022-10-12
1588797 byte
Conference paper
Electronic Resource
English
Toward attribute-based access control policy in industrial networked systems
BASE | 2018
|Introducing Attribute-Based Access Control to AUTOSAR
SAE Technical Papers | 2016
|INTEGRATION OF ATTRIBUTE-BASED ACCESS CONTROL INTO AUTOMOTIVE ARCHITECTURES
British Library Conference Proceedings | 2019
|