托管者有权重的动态门限多重密钥托管方案  

Dynamic Threshold Multi-Key Escrow Scheme among Weighted Escrow Agents

作　　者：李林[1] 曹瑀 李志华[1] 

机构地区：[1]江南大学物联网工程学院,江苏无锡214122 [2]大连理工大学软件学院,辽宁大连116024

出　　处：《江南大学学报（自然科学版）》2015年第5期556-561,共6页Joural of Jiangnan University (Natural Science Edition)　

基　　金：江苏省产学研联合创新项目(BY2013015-23);中央高校科研专项项目(JUSRP211A 41)

摘　　要：针对现有密钥托管体制中多密钥托管问题,基于ECC密码体制和Shamir门限方案的安全性,提出了一种基于动态多重密钥共享协议的门限密钥托管方案。该方案中多密钥分发者可以根据密钥托管者的权重值以及托管密钥的重要性,动态调整托管密钥的门限值,托管代理只需维护一份密钥份额,即可实现多重密钥的托管。方案的通信均在公共信道上完成,避免了维持秘密通道的额外开销。对方案进行了评价,结果表明方案具备良好的前向保密性、安全性与有效性。Aiming at the multi-key escrow problem in the existing escrow system,a threshold key escrow scheme based on the dynamic multi-key sharing protocol is proposed,which is based on the security of the ECC cryptography system and the Shamir threshold scheme. According to the weight of the key escrow and the importance of the key,the multi-key distributor can adjust the threshold dynamically in the scheme,each escrow agent needs to maintain a key share to realize the escrow of multi-key. The communications of the scheme is carrying on in a public channel,whereas non-requirement of a secret channel,so that it can avoid the extra cost of computation to maintain this secret channel.Finally the evaluation and research are presented,it shows that the proposed scheme is secure and effective,and can offer a good forward secrecy.

关 键 词：动态多重密钥共享协议 密钥托管方案 托管代理 权重值 前向保密性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]