Optimization of attribute-based access control policy with priority filtering

The ABAC model currently has a wide range of application scenarios, such as cloud environments, the Internet of Things, and fine-grained access control for NoSQL databases. Although the use of attribute-based control techniques can solve problems such as insufficient access control granularity, it immediately brings the problem of inefficient access control. In this paper, we design a new ABAC policy matching algorithm, when the guest sends an access request, we first filter out the access requests that are unlikely to be decided using a cuckoo filter and reject the access request directly. If the access request passes the filter, then the policy that can match the access request is found through the primary index table and secondary index table of the policy and the decision result is given. Experiments prove that the algorithm performs best in the worst case and performs well in the general case, and can greatly improve the efficiency of attribute-based access control.