分布式CA下空间网络认证密钥安全度量方法  

Measurement Method for Space Networks Authenticated Key Security under Distributed CA

作　　者：罗长远[1] 李伟[1,2] 李海林[1] 蹇波[1] 

机构地区：[1]解放军信息工程大学电子技术学院 [2]解放军63895部队

出　　处：《电子与信息学报》2009年第10期2316-2320,共5页Journal of Electronics & Information Technology

基　　金：国家863计划项目(2006AAJ124)资助课题

摘　　要：基于分布式CA的密钥管理策略解决了空间网络中不易实施集中式密钥管理的难题,但也给认证密钥的安全带来了新的威胁。该文在描述和分析空间网络中认证密钥的安全威胁的基础上,提出了一种度量认证密钥安全强度的方法。该方法可根据系统门限值、密钥更新周期等参数的设置情况,定量度量认证密钥的安全强度。通过分析系统门限值和密钥分量更新周期对安全强度的影响,给出了合理设置这两个网络安全参数的方法。The key management schemes bsaed on Distributed Certificate Authority resolve the difficulty to adopting concentrating key management in space networks, but result in some new threats of authenticated key. Based on discribing and analyzing the threats suffered by authenticated key of space networks, a measurement method for security intensity of authenticated key is proposed. The method can quantitatively measure the security intensity of authenticated key according to the setting of parameters, such as threshold value, key-update period etc. By analyzing the impact of threshold value and key-update period on authenticated key security, a method of setting the two networks security parameters reasonably is given.

关 键 词：空间网络 分布式CA 门限机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]