Abstract: The current mainstream data platforms cannot guarantee the consistency,authenticity,and integrity of data in a multi-departmental situation,and it is also difficult to resist malicious attacks on data.An access control scheme mixed with attribute-based and capability-based access control models on blockchain for the cross-departmental border port entry and exit information sharing process was proposed.At the same time,the Interplanetary File System (IPFS) was used to expand the storability of blockchain in an off-chain manner.Based on the access control design in smart contracts,the generation and delegation of access capabilities could be performed with a more detailed intensity.The framework and process of access control were also elaborated and analyzed in detail.The performance and effectiveness of the blockchain network were verified through simulation experiments,and the research content was summarized and prospected.

Key words: blockchain, access control, attribute-based access control, capability-based access control, smart contract, interplanetary file system

摘要： 鉴于主流数据平台难以保证多部门数据的一致性、真实性和完整性,也难以抵御对数据的恶意攻击,针对跨国运政出入境信息共享流程,基于区块链技术,提出一种混合属性访问控制和能力访问控制的数据共享访问控制模型的流程控制,采用星际文件系统以链下的方式拓展区块链的可存储性;通过智能合约,以更细粒度的模式实现访问能力生成和委托,并详细阐述和分析了访问控制的框架和流程。通过仿真实验验证了本区块链网络的性能和有效性,并对研究内容进行了总结和展望。

关键词: 区块链, 访问控制, 基于属性的访问控制, 基于能力的访问控制, 智能合约, 星际文件系统