In the edge-cloud collaborative application scenario,there are many problems in the secure communica-tion,information security exchange and secure resource sharing of multi domain terminals. In order to solve these problems,a group key agreement (GKA) protocol based on dynamic attribute permissions is proposed. In the protocol,a key verifica-tion algorithm is proposed to solve the security problems caused by key generation and key distribution in the traditional scheme. The hidden attribute authentication technology is adopted to realize terminal identity authentication. At the same time,hidden attribute authentication technology ensures that the terminal identity and attribute information are not dis-closed. In the protocol,the combination of attribute-based encryption (ABE) and Newton interpolation polynomial is adopt-ed,which can support secure fine-grained group key agreement. By adopting asymmetric computing,the computing tasks are transferred to the edge server for execution to reduce the computing load of the terminal. The tamper-proof characteris-tics of blockchain technology are applied to realize the integrity verification of terminal identity and communication infor-mation so that the data can be traced. In addition,the protocol supports dynamic updating of attribute permissions to ensure the freshness of groups. Compared with the applied literature,this protocol has good performance in computing time,com-puting energy consumption and communication energy consumption.