Extended access control mechanism based on multiattribute fusion

In this paper, an extended access control mechanism is proposed for controlled sharing of data after data flow in complex network environment, which provides more secure, efficient and personalized data access methods, ensuring that users can flexibly obtain data that meet their requirements. The proposed control mechanism is divided into two categories: constraint control and propagation control. Among them, constraint control solves the problem of access authorization of data before access request by the access request entity, and propagation control is used for extended control of data after data leave the data center. The proposed mechanism realizes direct and indirect access control of data, and takes the whole life control of electronic invoices as an example to show the implementation method of the proposed mechanism.