# AHC: Advanced Network-Hiding Access Control Framework
## 6 Conclusions  
This paper introduces the Advanced Network-Hiding Access Control (AHAC) framework, which is a novel strategy designed to enhance network security by hiding infrastructure addresses and refining access controls within a zero trust framework. Our comprehensive evaluations demonstrate that AHAC significantly outperforms Single Packet Authorization (SPA) in terms of performance, extensibility, and overall security efficacy. The integration of Noise Protocol encryption and ECC not only strengthens security measures but also optimizes computational resources, making it particularly advantageous in environments with resource constraints. The superiority of ECC over RSA in encryption and decryption speeds is highlighted, showcasing its effectiveness in scenarios requiring high computational efficiency. AHAC's architecture also exhibits high availability and fault tolerance, especially noted in its capacity for dynamic extensibility and effective resource distribution. In summary, AHAC marks a substantial advancement in the field of network security, providing scalable and efficient solutions well-suited for contemporary digital challenges. The foundational principles and technologies of AHAC are poised to exert a profound impact on future security architectures and strategies. Integrating this framework with Decentralized Digital Identity (DID) research presents a promising avenue, potentially addressing secure access control for individuals and devices from different organizations and countries when accessing critical data resources. Looking forward, we plan to apply AHAC in more practical scenarios, particularly in complex network security environments with high data security requirements, such as cross-border secure data access scenarios. Furthermore, we will validate this method in multiple dimensions, including security, data transmission efficiency, resistance to spoofing attacks, and the ability to counter detection systems.  
Conceptualization, M.X. and W.W.; methodology, M.X. and B.C.; software, B.C. and S.C.; validation, Y.L., B.C. and S.C.; formal analysis, M.X. and Y.L.; investigation, B.C.; resources, M.X. and J.F.; data curation, T.I.S. and S.W.F.; writing--original draft preparation, M.X. and Z.T.; writing--review and editing, M.X., B.C., S.C., L.W. and Z.T.; visualization, Z.T. and Y.L.; supervision, W.W. and M.X.; project administration, W.W. and Z.T.; funding acquisition, M.X. and J.F. All authors have read and agreed to the published version of the manuscript.  
This work was supported in part by the Macao Science and Technology Development Fund Project under contract No. 0014/2023/EIB2.  
Not applicable.  
Informed Consent Statement: Informed consent was obtained from all subjects involved in the study.  
Data Availability Statement: Data available upon request.  
Conflicts of Interest: Author [PERSON] was employed by the Hangzhou Xianyin Information Technology Co., Ltd.; authors [PERSON], [PERSON] were employed by the Fnetlink Tecnology Co., Ltd.; author [PERSON] was employed by China Telecom Co., Ltd. Sichuan Branch. All authors declare that the research was conducted in the absence of any commercial or financial relationships that could be construed as a potential conflict of interest.  
The following abbreviations are used in this manuscript:  
\begin{tabular}{l l} IoT & Internet of Things \\ DDoS & Distributed Denial of Service \\ SPA & Single Packet Authorization \\ AC & Access Control \\ ASP & Authorization Service Provider \\ SDP & Software-Defined Perimeter \\ \end{tabular}