一个基于单向散列函数的实用等级密钥管理方案  

A Practical Hierarchical Key Management Scheme Based on One-Way Hash Function

作　　者：韩心慧[1] 龙勤[1] 司端锋[2] 诸葛建伟[1] 叶志远[1] 

机构地区：[1]北京大学计算机科学技术研究所,北京100871 [2]中国科学院软件研究所信息安全国家重点实验室,北京100080

出　　处：《北京大学学报（自然科学版）》2008年第4期527-536,共10页Acta Scientiarum Naturalium Universitatis Pekinensis

基　　金：国家高技术研究发展计划专项经费资助(2006AA01Z445)

摘　　要：针对等级角色的权限管理和访问控制,形式化地定义与分析了等级密钥管理问题,提出了一个基于单向散列函数的实用的等级密钥管理方案。该方案允许各等级角色自主选择主密钥,并利用安全的单向散列函数和公开的辅助参数构造角色间的等级权限关系,其密钥生成与密钥推导过程简单快捷,能够有效地满足等级系统权限管理的安全需求。与目前已有的等级密钥管理方案相比较,密钥推导效率及存储开销均有所优化,同时能够更好地适应等级角色访问控制的动态变化。A formal definition and analysis on the hierarchical key management is presented for permission management and access control problem in the role hierarchy. Based on one-way hash function, a practical hierarchical key management scheme is proposed. This scheme allows the role to select its master key by itself, and constructs the hierarchical permission relationship with secure hash function and public parameters. The process of key generation and derivation is simple and effective in this proposed scheme, which satisfies the security requirement of the hierarchical permission management. Compared with other present schemes, the new scheme optimizes the efficiency of key derivation and storage overhead. The dynamic access control of hierarchical role can be adapted in this new scheme.

关 键 词：信息安全 角色访问控制 密钥管理 等级安全 

分 类 号：TN918[电子电信—通信与信息系统]