A Cross Data Center Access Control Model by Constructing GAS on Blockchain

With the rapid development of cloud computing, big data, and mobile Internet technology, data sharing across different data centers is increasingly urgent. Meanwhile, data security risks such as unauthorized access and data abuse bring serious challenges to data security sharing. Due to its poor scalability, traditional access control technology cannot play its role in the distributed computing paradigms with massive data and dynamic network environment. Attribute-based access control (ABAC) model is a potential candidate for data sharing cross data centers. But it still faces some challenges, such as different attribute semantics among data centers, and slow query speed of attributes and policies. This paper proposes an architecture for access control across data centers by constructing a global attribute set (GAS) on the blockchain to manage attributes and policies. To achieve a high efficiency, the scheme utilizes world state rather than block for query of data attributes and policies, and employs trust degree to pre authorization. Security analysis and experimental results show that the model is secure and practicable.