关键词: 云制造, 访问控制, 属性基加密, 二叉决策图

Abstract: Aiming at the problem that the traditional access control schemes can't solve the security issues caused by huge of number and types of entities in cloud manufacturing,a new access control scheme was proposed based on Attribute-Based Encryption(ABE).With the help of generic attributes and data encryption,the proposed scheme could realize batch access control of large-scale users,even potentially unknown users.In the new scheme,multiple authorities of same function were deployed to collaborate with each other,and thus a decentralized system framework of characteristics such as reliable,stable and efficient was implemented.Based on binary decision diagrams,a functional access structure was designed,and an ABE scheme with functions such as fast decryption and policy updating was further proposed.A fine-grained access control system was implemented based on above-mentioned decentralized framework and ABE scheme.Theoretical analysis showed that the above design performed well in security,functionality and efficiency.

Key words: cloud manufacturing, access control, attribute-based encryption, binary decision diagrams