适合移动Ad hoc网络基于时限撤消的自愈组密钥分发方案的研究  

ON SELF-HEALING GROUP KEY DISTRIBUTION SCHEME BASED ON TIME-LIMITED REVOCATION FOR MOBILE Ad hoc NETWORKS

作　　者：范海秀 周海[2] 吴丽珍[3] 

机构地区：[1]甘肃省经济贸易学校电教中心,甘肃兰州730000 [2]甘肃广播电视大学教务处办公室,甘肃兰州730030 [3]兰州理工大学电子工程与信息工程学院,甘肃兰州730050

出　　处：《计算机应用与软件》2012年第8期145-149,179,共6页Computer Applications and Software

基　　金：甘肃省自然科学基金项目(0809RJZA019)

摘　　要：提出一个新的MANET(mobile ad hoc network)中基于时限撤消具有自愈能力的组密钥分发方案,通过双向散列链DDHC(dual directional hash chains)和HBT(Hash binary tree)树结构实现了组密钥之间的冗余关联和访问控制;在没有管理节点协助的情况下,利用当前发布的会话密钥信息和自身秘密信息,合法用户节点可以自主恢复出历史组密钥;通过秘密撤消多项式实现了管理节点的撤消功能;接着,提出一个改进方案。安全性和性能分析表明,新方案能够抵御没有会话交集的用户节点同谋破解攻击;在满足MANET的安全需求前提下,有效地节省网络带宽和存储资源。A novel group key distribution scheme with self-healing capability based on time-limited revocation for MANET （mobile ad hoc network） is proposed. The control of group key in access and redundant association relation between different group keys is realised using DDHC （dual directional hash chains） and HBT （Hash binary tree） ; By means of session key information and keys＇ secrets information itself currently distributifig, the legal group members can recover the lost historical group keys without the help of the group manager, and the revo- cation function of the group manager can be achieved by revoking the polynomial secretly. Moreover, an improved scheme is proposed as well. The security and performance analysis shows, this proposed scheme are secure in resisting the collusive breaking attacks launched by muhiple group members; on premise of satisfying the security requirements of MANET, it saves effectively the storage resources and networks hand- width.

关 键 词：组密钥管理 移动自组网 自愈性 双向散列链 单向哈希二叉树 同谋破解 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]