Cryptographic key assignment scheme for access control in a hierarchy

摘要

A cryptographic key assignment scheme for access control in a user hierarchy is proposed. The users and their owned information items are classified into disjoint sets of security classes where the hierarchy on security classes is an arbitrary partial order. Based on Newton's interpolation method and a predefined one-way function, each security class Ci is assigned a secret key SKi and some public parameters (P1i, P2i). The information items owned by the security class Ci are encrypted by an available symmetric cryptosystem with the enciphering key SKi. Through the computing of the assigned security key and the public parameters, only the security class in the higher level can derive any of his successors' secret keys. Thus, only the security classes in the higher level can access the information items owned by the security classes in the lower level. We also show that our proposed scheme is not only secure but also practical.