面向工业云的数据安全通信机制

Secure data communication scheme for industrial cloud

为构建可动态更新的访问控制策略,确保只有合法用户才能访问设备数据,提出一种基于属性的加密方案。利用混沌映射构建一次一密的通信信道,使用户可以安全地对现场设备进行远程监控。加解密计算和策略更新均外包至云雾节点,降低设备端和用户端的资源开销,实现人机之间实时、双向的安全通信。通过理论分析和实验仿真,验证了该方案能够支持表达能力丰富的访问策略,对云中的数据实现动态策略更新,在存储和计算开销方面具有优势。

To construct a dynamically updated access control policy to ensure that only legitimate users can access device data,an attribute-based encryption scheme was proposed.A one-time pad communication channel was constructed with chaotic mapping to enable users to remotely monitor field devices safely.The encryption,decryption and policy updates were outsourced to the cloud and fog nodes,reducing resource overhead on the device side and the user side,and the real-time and bidirectional secure communication between human and machine was realized.Through theoretical analysis and experimental simulation,it is verified that the scheme can support access policies with rich expressive capabilities,realize dynamic policy updates for data in the cloud,and have advantages in storage and computing overhead.