关键词: 属性访问控制, OSBE技术, 敏感属性, 权限变更, 有限状态机

Abstract: Access control model based on attribute cannot support the protection of sensitive attribute and the implement of permission changing. Using the signature of the attribute certificate ensures that the subject’s attribute is no longer directly exposed to the authorization module. By introducing the attribute certificate signing negotiation guarantees that the attribute in the repository will no longer be ambitious accessed by Policy Decision Point（PDP）; by designing the testing and update functions in the Policy Enforcement Point（PEP） implements the permission changing in the process of access. At last, the safety of the module is testified by using FSM（Finite State Machine）, and example analysis indicates that the model can support the protection of sensitive attribute and the implement of permission changing.

Key words: access control attribute-based access control, changing permission, Oblivious Signature-Based Envelope（OSBE）, sensitive attribute, Finite State Machine（FSM）