全球航班运行数据的共享机制—广域信息管理SWIM(System Wide Information Management)作为国际民航组织ICAO推行的标准，采用面向服务的结构SOA(Service Oriented Architecture)承载多源异构的航班运行数据。为了解决航班运行数据共享中存在的数据安全和隐私保护的问题，本课题提出面向SWIM的基于属性加密的航班运行数据共享的访问控制方法，将细化的航班运行数据属性与SWIM航空用户的私钥相关联，建立属性关联矩阵，实现航班运行数据共享细粒度访问策略。研究内容包括：（1）基于属性加密的航班运行数据共享的访问控制体系结构；（2）基于属性加密的SWIM航空用户认证密钥协商协议；（3）基于属性加密的航班运行数据共享的访问控制方法；（4）基于属性加密的航班运行数据多授权中心签名方案。

Global flight operational data is shared through system wide information management (SWIM) with service-oriented architecture (SOA). SWIM is an aviation information sharing mechanism promoted by ICAO. In order to solve the data security and privacy protection problems of flight operation data required in the document of China Civil Aviation Flight Operation Data Open Management Measures, this project proposes an SWIM-oriented fine-grained access control method for flight operation data sharing based on attribute-based encryption (ABE). This method refines the attributes of flight operation data and makes these attributes be associated with SWIM aviation user's private keys, and establishes an attribute association matrix to implement a fine-grained access policy for flight operation data sharing. The main research contents of this project include (i) Access control architecture based on ciphertext policy attribute-based encryption (CP-ABE) for flight operation data sharing. (ii) SWIM aviation user authentication key agreement protocol based on CP-ABE. (iii) Access control method based on CP-ABE for flight operation data sharing. (v) Multi-authorization center signature scheme for flight operation data based on CP-ABE.