Abstract:With an increasing demand for authenticated data exchange between jurisdictions, ensuring the privacy and security of data interactions is crucial for national security, public health, and economic vitality, becoming a fundamental national infrastructure. Current solutions can be categorized into two types: fully decentralized autonomous systems based on blockchains or centralized solutions that rely on authoritative centers such as certification authorities (CAs). In reality, a balance needs to be struck between guaranteed authority and privacy independence. A certain authority is needed as an authorization guarantee, and decentralization is required to ensure privacy and the independence of the authority. This paper proposes a novel scheme, CT-MA-ABE (Cross-Trust Multiple Authorization Attribute-Based Encryption), to address these issues by implementing MA-ABE for cross-border institutional authorization interactions, utilize blockchain certification authority (BCA) for credibility and encryption-based authorization to protect attribute data privacy. This solution integrates the role of 'notary' in cross-border interactions, addressing the supervision problem in fully decentralized approaches while also considering the trust issue in centralized systems. This paper also introduces the Universal Certificate Authority Pool (UCAP), an innovative hybrid federated authorization method, creatively utilizing the implied authorization conditions of attributes to create a flexible and transitive authorization mechanism based on attribute relationships and extensions, enhancing privacy protection and improving the speed of authorization matrix calculation. The successful deployment of the system between the legal jurisdictions in South China, Zhuhai and Macau as a critical infrastructure component for securing data interactions further demonstrates its effectiveness as a reliable and secure solution.

Using XML and XACML to Support Attribute Based Delegation

A Task-Role Based Access Control Model with Multi-Constraints

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Separation of Duty Constraint for Permission Based Delegation Model

Multi-level Access Control for Collaborative CAD

Realization Distributed Access Control Based on Ontology and Attribute with OWL

Using XACML to Define Access Control Policy in Information System

XACML-based Access Control and RBAC Constraints

Extensible markup language based agent capability description language XACDL

An Extended Access Control Model Based on Roles and Departments

A Scalable Permission Management System With Support of Conditional and Customized Attributes

An Improved Scheme for Delegation Based on Usage Control

A Research on XML Based Architecture Description Language-XBA

Managing Delegation in Access Control Models

Multi-Authority Attribute Based Encryption Scheme with Revocation.

A Model for Dynamic Access Control of XML Documents Using Semantics

Cross trust: A decentralized MA-ABE mechanism for cross-border identity authentication

Hierarchical Attribute-Based Access Control with Authentication for Outsourced Data in Cloud Computing

Using Semantics for Dynamic Access Control of XML Documents in Dynamic Coalition Environment.

A Decentralized Rbac Model And Its User-Role Administration

Using trust for restricted delegation in grid environments