一种基于等级树模型的群组密钥管理方案  

A Group Key Management Scheme Based on Grade-tree Model

作　　者：高宝阳 潘进[1] 康连瑞[1] 

机构地区：[1]西安通信学院信息安全系,陕西西安710106

出　　处：《计算机与现代化》2014年第8期34-37,共4页Computer and Modernization

摘　　要：安全、高效的群组密钥管理方案是保证群组通信安全的关键。在综合考虑军队保密通信和群组密钥管理的特点及要求的基础上,提出一种基于等级树模型的群组密钥管理方案。根据军队隶属关系建立等级树模型,引入单向散列函数生成层间密钥以维护上下层访问权限,对底层小组的密钥管理采用一种逻辑密钥层次(LKH,Logical Key Hierarchy)的改进算法。对该方案的性能分析结果表明该方案在通信开销、密钥存储开销等方面优于其他同类方案。Secure and highly-efficient group key management is critical in secure group communication. A group key management scheme based on grade-tree model was proposed according to the characteristic of military secret communications and the need of group key management. The grade-tree model was established firstly according to relationship of administrative subordination.Then keys among levels were generated by one-way hash function in order to guarantee accessing popedom and a reformative LKH arithmetic was used to manage members in lowest subgroups. The performance of scheme is analysed,the result indicates： this scheme is better than other congener schemes in communications cost and key storage cost.

关 键 词：群组通信 密钥管理 等级 逻辑密钥树 

分 类 号：TP311.12[自动化与计算机技术—计算机软件与理论]