2
$\begingroup$

So if possible could someone tell me or at least recommend a book.

Improve this question
$\endgroup$

1 Answer 1

Reset to default
3
$\begingroup$

ABE provides a secure and automatic way to enforce access control, but access control may not involve encryption.

In the ABE setting, the resources (that one wants to access) are encrypted by a "controller" and then the ciphertexts are made public and each user is granted a key corresponding to its specific access right. Then, the controller doesn't need to interact with the users to manage their access, because such access control enforcement can be guaranteed by the security of the underlying encryption scheme.

However, in a general access control setting, a "controller" (e.g., an OS or an application) may need to interact with the user (e.g., via an OS access control mechanism or a login system) and grant it the correct access right each time the user wants to access some resources. The resources here may not be encrypted, but are only available to the "controller".

Improve this answer
$\endgroup$
2
  • $\begingroup$ what do you mean by a controller? $\endgroup$
    – user658961
    Nov 9, 2018 at 18:01
  • $\begingroup$ It's the party who owns the resources. $\endgroup$
    – Shan Chen
    Mar 12, 2019 at 3:01

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.