Abstract: Privacy preservation is a vital problem to share resource and collaboration among multi-domains. We analyzed the privacy leakage problems of current access control models, and then proposed a rolcbased access control model supporting privacy preservation. The model is based on identify-based encryption,avoiding a number of drawbacks in traditional role-based access model and making privacy preservation among multi-domains come true. Finally, we analyzed and certificated the security of the model in details by random oracle, and the model meets the IND-CCA2 mantic security. According to the simulation, the method is a practical model.

Key words: Access control, Privacy protection, Identify-based encryption, Police expression, Random oracle