面向工业云的数据安全通信机制  

Secure data communication scheme for industrial cloud

作　　者：屠袁飞 刘犇[1] 王静 杨志祥 马骑龙 TU Yuan-fei;LIU Ben;WANG Jing;YANG Zhi-xiang;MA Qi-long(College of Electrical Engineering and Control Science,Nanjing Tech University,Nanjing 211800,China;School of Computer Science,Nanjing University of Posts and Telecommunications,Nanjing 210003,China)

机构地区：[1]南京工业大学电气工程与控制科学学院,江苏南京211800 [2]南京邮电大学计算机学院,江苏南京210003

出　　处：《计算机工程与设计》2023年第7期1969-1976,共8页Computer Engineering and Design

基　　金：国家自然科学基金项目(61972209)。

摘　　要：为构建可动态更新的访问控制策略,确保只有合法用户才能访问设备数据,提出一种基于属性的加密方案。利用混沌映射构建一次一密的通信信道,使用户可以安全地对现场设备进行远程监控。加解密计算和策略更新均外包至云雾节点,降低设备端和用户端的资源开销,实现人机之间实时、双向的安全通信。通过理论分析和实验仿真,验证了该方案能够支持表达能力丰富的访问策略,对云中的数据实现动态策略更新,在存储和计算开销方面具有优势。To construct a dynamically updated access control policy to ensure that only legitimate users can access device data,an attribute-based encryption scheme was proposed.A one-time pad communication channel was constructed with chaotic mapping to enable users to remotely monitor field devices safely.The encryption,decryption and policy updates were outsourced to the cloud and fog nodes,reducing resource overhead on the device side and the user side,and the real-time and bidirectional secure communication between human and machine was realized.Through theoretical analysis and experimental simulation,it is verified that the scheme can support access policies with rich expressive capabilities,realize dynamic policy updates for data in the cloud,and have advantages in storage and computing overhead.

关 键 词：工业云 属性加密 访问控制 策略更新 计算外包 数据通信 机密性 

分 类 号：TN918[电子电信—通信与信息系统] TP309[电子电信—信息与通信工程]