Abstract: Under the digital transformation of supply chains, multi-source data exchange and cross-enterprise sharing face security risks such as data leakage and policy exposure. Traditional attribute-based encryption schemes suffer from inefficiency and insufficient dynamic control, making them unsuitable for such scenarios. To address these challenges, this paper proposes a revocable ciphertext search scheme with fully hidden access policies under a cloud-edge collaborative architecture, designed to meet the demands for efficient data interaction and privacy protection in complex supply chain environments. The scheme integrates the real-time processing capabilities of edge computing with the robust computational power of cloud computing. By leveraging collaborative ciphertext caching and pre-decryption services at the edge, it significantly reduces decryption latency and local computational load on users. Access policies are fully hidden through a combination of multi-value attributes with wildcard support, gate-based access structures, and Bloom filters, effectively preventing sensitive policy leakage during data transmission and storage. Furthermore, blockchain and smart contracts are introduced to enable efficient search and dynamic revocation: a "search contract" automates keyword trapdoor validation to shorten matching time, while a "revocation contract" dynamically updates permissions for attribute revocation. Under the Decisional Bilinear Diffie–Hellman (DBDH) assumption, the scheme achieves indistinguishability against chosen-plaintext attacks. Performance analysis shows that it incurs low computational overhead, particularly during the search phase, the computational cost is increased by nearly two-thirds compared to the BADS scheme, thereby providing efficient and secure data retrieval for collaborative supply chain management.

摘要： 供应链数字化转型背景下，多源数据交互与跨企业共享面临数据泄露、策略暴露等安全风险，传统属性基加密方案因效率低、动态管控不足，难以适配场景需求。针对此问题，本文提出云边协同架构下基于属性的策略全隐藏可撤销密文检索方案，以应对供应链复杂场景下的高效数据交互与隐私安全需求。该方案融合边缘实时处理能力与云端强大算力，通过云边协同优化性能：边缘端提供预解密服务，结合云端外包存储，经协作密文缓存管理加速数据获取，依托边缘近用户端低延迟特性，显著降低用户解密等待时间与本地计算负载；采用支持通配符的多值属性与门访问结构与布隆过滤器结合，实现访问策略完全隐藏，有效防范供应链数据传输与存储中的敏感策略泄露，强化数据隐私性；引入区块链与智能合约实现高效检索与动态撤销，设计“搜索合约”自动化验证关键字陷门以缩短匹配时间，通过“撤销合约”动态更新权限完成属性撤销。方案在DBDH假设下满足选择明文攻击不可区分性安全，性能分析表明其计算开销较低，尤其搜索阶段计算开销较BADS方案提升近三分之二，为供应链协同管理提供高效数据检索与安全保障。