机会网络中基于社会属性的按需密钥管理方案  

On-demand key management based on social attribute for opportunistic networks

作　　者：陈曦[1,2] 李光松[3] 田有亮[1] 马建峰[1] 

机构地区：[1]西安电子科技大学计算机网络与信息安全教育部重点实验室,陕西西安710071 [2]中国电子科技集团公司第二十研究所,陕西西安710068 [3]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《通信学报》2012年第12期93-99,共7页Journal on Communications

基　　金：长江学者和创新团队发展计划基金资助项目(IRT1078);国家自然基金委员会--广东联合基金重点基金资助项目(U1135002);国家科技部重大专项基金资助项目(2011ZX03005-002);中央高校基本科研业务费基金资助项目(JY10000903001)~~

摘　　要：针对机会网络的间歇性连通、快速移动、自组织管理等特征,提出了基于社会属性的按需密钥管理方案。首先利用基于身份的门限签名方案,实现了节点社会属性的自认证。随后结合机会网络的路由特性,节点之间根据社会属性匹配度有选择地颁发身份证书,并建立可度量的信任网。算法在优化证书图的同时,避免了恶意节点可能导致的无效证书链路的生成。实验仿真表明,该方案可提供较高的证书链重构成功率与节点认证可达率,并有效地降低了密钥管理所需的网络开销。An on-demand key management scheme was proposed based on social attributes, which could conform to the characteristics of intermittent connectivity, high mobility and self-organized management in opportunistic networks. By utilizing the identity-based threshold signature scheme, the authentication of nodes＇ social attributes was realized. Due to the specialty of the opportunistic routing protocols, nodes selectively issued the identity certificates for each other to establish the Web of trust based on the matching of social attributes. Consequently, the performance of certificate graph was efficiently optimized comparing to the traditional methods. Meanwhile, thanks to checking the social attribute evidences, the invalid certificate chains caused by malicious nodes were avoid to be built. Simulation result shows that, the scheme can provide high success ratio for reconstruction of certificate chains and high user teachability through low network costs in opportunistic networks.

关 键 词：机会网络 密钥管理 身份密码学 门限密码学 社会属性 证书图 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]