A Robust Dynamic Access Control Scheme in a User Hierarchy Based on One-Way Hash Functions

A dynamic access control scheme can be used to improve security and privacy protection for some emerging Internet technologies since it can provide secure privilege management for accessing information resources on the Internet. In 2004, Yang and Li introduced an access control scheme based on one-way hash function for using finite number of keys and a few public hash functions to solve the dynamic access control problem such as adding, deleting or changing the relationship between nodes. This paper, however, found that users can overstep his authority to access unauthorized information in Yang and Li's scheme, which violates their security claims. We further proposed a robust dynamic access control scheme to eliminate such kind of the attack.