数据与计算发展前沿 ›› 2026, Vol. 8 ›› Issue (5): 217-226.

CSTR: 32002.14.jfdc.CN10-1649/TP.2026.05.017

doi: 10.11871/jfdc.issn.2096-742X.2026.05.017

• 技术与应用 • 上一篇    下一篇

基于零知识证明的分布式文件系统跨域资源自适应访问控制方法

马红双*(),陈凯,范鑫,王兴阳   

  1. 江苏电力信息技术有限公司， 江苏 南京 210029
  • 收稿日期:2026-04-24 出版日期:2026-10-20 发布日期:2026-10-20
  • 通讯作者: *马红双（E-mail: e0772102@163.com）
  • 作者简介:马红双，江苏电力信息技术有限公司，中级工程师，主要研究方向为电网行业信息系统管理软件设计研发，电网运行数据应用监控、分析，电力工程施工智能化管理等。
    本文中负责论文选题、研究方法确立、论文起草与修改。
    MA Hongshuang is an intermediate engineer at Jiangsu Electric Power Information Technology Co., Ltd. His primary research interests include the design and development of management software for power grid information systems, monitoring and analysis of power grid operation data, and intelligent management of power engineering construction.
    In this paper, he is responsible for identifying the research topic, establishing the research methodology, and drafting and revising the paper. E-mail: e0772102@163.com

A Cross Domain Resource Adaptive Access Control Method for Distributed File Systems Based on Zero Knowledge Proof

MA Hongshuang*(),CHEN Kai,FAN Xin,WANG Xingyang   

  1. Jiangsu Electric Power Information Technology Co., Ltd., Nanjing, Jiangsu 210029, China
  • Received:2026-04-24 Online:2026-10-20 Published:2026-10-20

RichHTML

2

PDF

5

摘要：

【目的】针对分布式文件系统跨域资源共享中身份验证与权限决策的语义鸿沟，提出基于零知识证明的自适应访问控制方法。【方法】设计压缩型属性承诺机制，通过多属性批量承诺降低通信与存储开销。构建动态ZKP电路生成算法，依据跨域策略自适应生成零知识证明电路，支持权限动态调整。融合形成可审计隐私保护框架，引入轻量审计令牌，实现可用不可见、违规可追溯的双重控制。【结果】结果表明，在分布式文件系统中，本文方法在授权与拒绝访问的控制准确率上均超过99%，吞吐量在800请求负载下达到558请求/s，约为对比方法的两倍。【结论】实验结果证明了所提方法既满足了系统对跨域资源访问的控制需求，又保障了资源调度的灵活性。

关键词: 零知识证明, 分布式文件系统, 跨域资源, 属性访问, 自适应控制, 区块链

Abstract:

[Objective] A zero-knowledge-proof-based adaptive access control method is proposed to address the semantic gap between authentication and permission decision-making in cross-domain resource sharing of distributed file systems. [Methods] A compressed attribute commitment mechanism is designed to reduce communication and storage overhead through multi-attribute batch commitment. A dynamic ZKP circuit generation algorithm is constructed to adaptively generate zero-knowledge proof circuits based on cross-domain strategies, and support dynamic adjustment of permissions. These mechanisms are integrated to form an auditable privacy protection framework. Lightweight audit tokens are introduced to achieve dual control of resource availability and invisibility, while enabling the traceability of violations. [Results] The results show that in the case of distributed file systems, the proposed method has achieved an accuracy rate of over 99% in both authorization and denial of access control, and a throughput of 558 requests/s under a load of 800 requests, which is about twice of the throughput of the comparative method. [Conclusions] The experimental results demonstrate that the proposed method not only meets the system's control requirements for cross-domain resource access, but also ensures the flexibility of resource scheduling.

Key words: zero-knowledge proof, distributed file system, cross-domain resources, attribute-based access control, adaptive control, blockchain