Security label and attribute-based access control in service-oriented environments

Abstract

Compared with traditional systems, service-oriented environments are more dynamic and distributed. Although traditional access control is able to fulfill the security of requirements of closed systems on the whole, it can no longer meet the requirements of service-oriented environments. To deal with the issues that access control in the service-oriented environment needs to cross the boundary of the security domain, the high distribution, and heterogeneity of environmental characteristics, and how to establish efficient and guaranteed access to resources, access control based on security label and attribute is proposed for fine-grained resource information and rich policy security requirements. By using a CP-ABE mechanism, distributed fine-grained access control can be realized in the company of solving the issue of policy privacy leakage; By using the security label technology, the multi-level security mandatory access control is realized, and the security flow of information is achieved, thus protecting the service and its methods from unauthorized users. Finally, the proposed scheme has been verified to have reliable security through security analysis. The experimental outcomes indicate this proposed scheme is available and effective in terms of performance.