Comment on Wu-Chang cryptographic key assignment scheme for

Abstract

Wu and Chang proposed a cryptographic key assignment scheme for hierarchical access control in 2001. Based on the discrete logarithm problem, their scheme can be applied on a partially ordered set user hierarchy. However, in this paper, we will show that their scheme violates the predefined access control policy. Further, a simple improvement is given to eliminate the security leak.