分布式安全存储中基于共享组的周期性密钥更新  

Cyclic Key Update Scheme Based on Sharing Group for Distributed Secure Storage

作　　者：钱权[1] 王天宏[1] 黄国锐[2] 张瑞[1] 

机构地区：[1]上海大学计算机工程与科学学院,上海200444 [2]解放军陆军军官学院,合肥230031

出　　处：《上海大学学报（自然科学版）》2013年第1期39-43,共5页Journal of Shanghai University:Natural Science Edition

基　　金：国家自然科学基金资助项目(61003248);国家教育部博士点基金资助项目(20093108120016);上海市重点学科建设资助项目(J50103);上海市教委创新基金资助项目(09YZ05);上海市科委开放课题基金资助项目(09511501300)

摘　　要：分布式存储是解决海量数据存储的重要手段,而多用户环境下密钥的分发和更新是分布式安全存储的重要问题.传统方法大多采用密钥分发中心(key distribution center,KDC)进行控制,但随着用户数的增多,密钥中心的工作量增大.利用Chebyshev多项式的周期性特性和逻辑密钥树(logical key hierarchy,LKH)的层次密钥结构,设计一种分布式文件存储中基于文件共享组的周期性密钥更新方案(cyclic key update scheme,CKUS).该方案的特点是密钥的更新和传递无需借助公钥密码体制,而直接通过文件所有者进行组播;文件共享者采用本地计算,提高了计算效率.同时,利用Chebyshev多项式的周期性特点,使每个文件共享者自适应密钥更新,有效降低密钥更新时的通信量,减少用户节点的密钥存储量.Distributed storage is an efficient means for massive data storage. However, the key distribution and update are big challenges for such multi-user network environments. In traditional methods, key distribution and update are controlled by the key distribution center （KDC）. The increases users inevitably increase the KDC＇s workload. In this paper, a sharing group based cyclic key update scheme （CKUS） is proposed, which makes use of the cyclic characteristic of Chebyshev polynomials and the key management feature of logical key hierarchy （LKH）. The special feature of CKUS is that key updating and transmitting do not resort to the public and private keys, but are only multicast by the file owner directly. Thus, file sharers only use local computations, thus increasing computational efficiency. At the same time, the scheme takes advantage of the Chebyshev polynomial＇s cyclic characteristic, which make each file sharers update its key self-adaptively, reduce network traffic of key update effectively, and reduces the keys storage requirements of the user nodes.

关 键 词：分布式安全存储 密钥更新 逻辑密钥树 CHEBYSHEV多项式 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]