基于门限的分布式会议密钥管理方案  

A Distributed Conference Key Management Scheme Based on Threshold Cryptography

作　　者：郑明辉[1,2] 崔国华[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,武汉430074 [2]湖北民族学院计算机科学与技术系,恩施445000

出　　处：《武汉理工大学学报》2009年第18期12-15,54,共5页Journal of Wuhan University of Technology

基　　金：国家自然科学基金(60703048);湖北省教育厅科研基金(D20092903;B20082906)

摘　　要：会议密钥管理通过为参与组通信的成员生成、分发和更新会议密钥来满足加密认证等安全需求。基于可验证秘密分享机制和门限密码技术,提出了一种可验证的分布式会议密钥管理方案,方案不仅能满足前向安全性和后向安全性,而且能抵制恶意节点的主动攻击和拒绝服务攻击。同时,方案中的秘密份额更新算法能有效抵制退出节点的合谋攻击。Conference key management for muhicast is used for group members in one mtdticast session to generate, refresh and transfer conference key, which is used for encryption and authentication. Based on the verifiable secret sharing mechanism and threshold cryptography, a new verifiable distributed conference key management scheme is proposed. The presented scheme can not only satisfy the forward confidentiality and backward confidentiality, but also resist active attacks and denial of services. It also presents an efficient algorithm for updating the group secret share and proves that can resist the coalition of the left nodes.

关 键 词：密钥管理 会议密钥 可验证秘密分享 合谋攻击 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]