层次式访问控制方案.pdfVIP

On Key Assignment for Hierarchical Access Control Jason Crampton Keith Martin Peter Wild Information Security Group Royal Holloway, University of London United Kingdom {jason.crampton,keith.martin,p.wild }@rhul.ac.uk Abstract is sometimes referred to as hierarchical access control be- cause the partially ordered set of security labels can be rep- A key assignment scheme is a cryptographic technique resented as a hierarchy. for implementing an information flow policy, sometimes Although information flow policies were originally used known as hierarchical access control. All the research to in military systems, they have many other practical appli- date on key assignment schemes has focused on particu- cations, particularly if we regard the set of users as being lar encryption techniques rather than an analysis of what partitioned into a set of security classes, with each class be- features are required of such a scheme. To remedy this we ing associated with a particular security label. Such applica- propose a family of generic key assignment schemes and tions exist in many different environments, including secure compare their respective advantages. We note that every databases, broadcast services (such as Pay TV) and secure scheme in the literature is simply an instance of one of mail systems. The problem that needs to be addressed in all our generic schemes. We then conduct an analysis of the of these applications is how best to enf