基于改进的动态密钥托管方案的研究及其应用  

Research and application of improved dynamic threshold key escrow scheme

作　　者：李林[1] 李志华[1] 

机构地区：[1]江南大学物联网工程学院计算机科学系,江苏无锡214122

出　　处：《计算机工程与设计》2015年第7期1732-1736,共5页Computer Engineering and Design

基　　金：中央高校科研专项基金项目(JUSRP211A41);江苏省科技厅产学研前瞻基金项目(BY2013015-23)

摘　　要：针对密钥托管体制中存在的密钥管理中心欺诈和托管密钥伪造与被篡改问题,提出一种基于改进动态密钥分发协议的门限密钥托管方案。用户的托管密钥由用户与密钥管理中心共同产生,有效阻止用户或密钥管理中心的欺诈;通信在公共信道上进行,不需要在参与者之间维持秘密通道,减少计算与存储开销;引入组合公钥密码体制,有效实现托管代理与密钥份额的安全验证,提升方案的安全性和动态性。对方案进行评价研究,在PCI-E密码卡中进行应用。Aiming at the frauds of key management center and the tamper and forgery of key escrow,a threshold key escrow scheme based on the improved dynamic key distribution protocol was proposed.Since the user＇s key was computed with key management center together,the frauds of key management and user could be effectively prevented.The participants communicated in a public channel where no requirement of maintaining secret channel,so that the cost of computation and storage was reduced.The combined-public-key cryptosystem was combined,which effectively achieved the security authentication of escrow agent and secret shadow.The above innovation enhances the safety and flexibility of the scheme.Finally,its application was given in PCI-E cipher card after the scheme was evaluated.

关 键 词：动态密钥分发协议 密钥托管方案 组合公钥密码 密钥份额 密码卡 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]