基于双向散列链具有撤销能力的自愈组密钥分发机制  

Self-healing group key distribution scheme with revocation based on dual directional hash chain

作　　者：杜春来[1,2] 胡铭曾[2] 张宏莉[2] 张冬艳[2] 

机构地区：[1]北方工业大学信息工程学院,北京100144 [2]哈尔滨工业大学计算机网络与信息安全技术研究中心,黑龙江哈尔滨150001

出　　处：《通信学报》2009年第6期33-37,共5页Journal on Communications

基　　金：国家高技术研究发展计划("863"计划)基金资助项目(2007AA01Z446;2007AA01Z442)~~

摘　　要：提出了一种MANET中基于双向散列链具有撤销能力的自愈组密钥分发机制。通过建立会话密钥之间的冗余关联,实现了在不增加管理节点负担的情况下,合法节点利用当前广播信息和自身秘密信息自主恢复由于网络原因遗失会话的组密钥。利用撤销多项式管理者实现了对节点的撤销能力,此外赋予节点与其生命期相对应的秘密掩码值集合。安全分析和效率分析表明在保证安全属性的前提下,降低了通信开销和存储开销。A self-healing group key distribution scheme with revocation in MANET using dual directional hash chain was proposed. The association relation between different session keys was built. By means of broadcast information and own secrets, the legal nodes which lost some legal session keys due to network faults could be capable of recovering such lost session keys on their own, without requiring additional transmission from the group manager. The group manager could revoke the group nodes by revocation polynomial. Node was endowed with a set of masking secret according to its lifecycle. Through the security and efficiency analysis, the key distribution scheme reduces communication cost and storage cost yet still achieves security property.

关 键 词：组密钥发布 自愈 双向散列链 移动自组网 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]