基于零知识集的群组密钥分配方案  

A New Group Key Exchange Protocol Based on Zero-Knowledge Set

作　　者：孙海波[1] 林东岱[1] 

机构地区：[1]中科院软件所信息安全国家重点实验室,北京100080

出　　处：《电子学报》2005年第2期345-349,共5页Acta Electronica Sinica

基　　金：国家自然科学基金 (No .90 2 0 4 0 1 6 ;No .60 3730 4 8) ;国家 863项目 (No.2 0 0 3AA1 4 4 0 30 )

摘　　要：零知识集是一种新的具有零知识性质的集合 .这种集合的构造使得证明者对于任意元素都可以给出一个证明 ,证明该元素属于这个集合或者不属于这个集合 ,同时不泄漏额外的信息 .本文基于Pedersen承诺设计一种新的群组密钥分配方案 ,利用零知识集的性质实现密钥分配 .协议不仅保证了组成员可以安全动态的获得组密钥 ,而且保证了组成员除了获取组密钥 ,不会得到群组中其它成员的相关信息 .与先前工作相比 ,本文提出的方案提供了更高的安全特性 ,适合应用于一些较特殊的网络应用 ,如网络秘密会议 .Zero knowledge set is a set that has zero knowledge quality.The structure of the set makes that a prover can commit to any arbitrary finite set of strings and for any string,reveal with a proof whether a given element is in the set without revealing any knowledge beyond the verity of these membership assertions.In this paper,we propose a new Group Key Distribution protocol based on zero knowledge set and Peterson commitment so that the identity and number of the group members can be concealed and realize key distribution at the same time.The protocol not only provides a dynamic distribution on a group key,but also guarantees nobody can get additional information about other members except the group key.Compared with previous work,our protocol can provide more security,and is suitable for some special network application,such as secret network meeting.

关 键 词：零知识集 Pedersen承诺 群组密钥分配协议 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]