A Novel Privacy-Enhanced Fine-Grained Access Control Scheme

Access control technology ensures that information resources are not illegally used and accessed by restricting the ability and scope of users access to object resources. While, most access control models only focus on the optimization of access control policy, less attention is paid to the privacy of object resources. That is, authorized users have unlimited access to acquired object data. And it greatly increases the risk of privacy data being leaked. Therefore, our paper proposes a novel privacy-enhanced fine-grained access control scheme. The scheme introduces Differential Privacy (DP) into the role to resource allocation step of the Role-Based Access Control (RBAC) model. And the scheme realizes the privacy protection of the object data set and the fine-grained permissions control by assigning privacy budgets to different levels of roles. It enables users with different roles to obtain authorization object data sets with different accuracy. Finally, simulation results and performance analysis show that the scheme has high applicability of access control policy, strong privacy and high accuracy of object data set.