An Access Control Mechanism in Smart Identifier Network

Abstract

In recent years, with the development of mobile Internet, cloud computing, and other technologies, the traditional Internet architecture has been challenging to meet the needs of future network development. As a revolutionary network architecture, SINET provides security and mobility for the network through the identification mapping separation technology. At the same time, the development of programmable data plane technology provides conditions for the large-scale deployment of SINET. In this paper, we proposed an Attribute-based access control(ABAC) mechanism based on multidimensional attributes of users and services in the PDP-based SINET. We designed the workflow of property registration and access requests of the network. We built a network prototype system and verified the function of the access control mechanism. The results show that the access control mechanism proposed in this paper can meet the network's fine-grained security management and control requirements and ensure the secure access of users and services in the network.