安全的分散式多播密钥管理方案  

Secure decentralized multicast key management scheme

作　　者：杨明[1] 肖扬[1] 吕珊珊[1] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《解放军理工大学学报（自然科学版）》2008年第1期20-24,共5页Journal of PLA University of Science and Technology(Natural Science Edition)

基　　金：国家自然科学基金资助项目(90304015);江苏省自然科学基金资助项目(BK2006003)

摘　　要：为解决集中式多播密钥管理方案中服务器端的可靠性、安全性和可用性问题,提出了一种新的安全分散式多播的密钥管理方案。基于分散式控制和门限秘密共享的思想,将单个密钥服务器扩展为具有(t,m)门限控制结构的服务器组。多播组密钥的产生、分发和更新由多个服务器结点协作完成。提供了确保服务器成员只知道组密钥的影子密钥而不知道所产生的组密钥的安全机制,这种机制使得某些服务器成员被攻击导致信息泄漏也不会影响系统安全。此外,分散式管理结构和门限控制机制可有效避免单点失效和性能瓶颈问题,还可提高了密钥服务器的可靠性和抗毁性能。To solve the problems of reliability,security and availability in the server of centralized schemes,this paper put forward a new secure decentralized multicast key management scheme.Based on the decentralized management and threshold secret sharing control,the scheme replaces the single key server by a group of key servers with the structure of（t,m） threshold. The key servers group is responsible for the generation,distribution and update of the multicast group keys.The scheme also provides a secure mechanism that ensures every server to know only its shadow keys of the group keys instead of the group keys,so the system is secure even if information leakage occurs in some key servers when attacked.In addition,the decentralized structure and threshold control can solve the single-point failure and bottleneck problem,and lead to high reliability and survivability.

关 键 词：多播 多播安全 密钥管理 秘密共享 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]