面向Ad Hoc网络的无证书认证组密钥协商协议  

Certificateless authentication group key agreement protocol for Ad Hoc networks

作　　者：曹震寰[1] 顾小卓[2] 顾梦鹤 CAO Zhenhuan;GU Xiaozhuo;GU Menghe(Gansu Information Center,Lanzhou Gansu 730030,China;Institute of Information Engineering,Chinese Academy of Sciences,Beijing 100093,China;Northwest Institute of Eco-Environment and Resources,Chinese Academy of Sciences,Lanzhou Gansu 730030,China)

机构地区：[1]甘肃省信息中心,兰州730030 [2]中国科学院信息工程研究所,北京100093 [3]中国科学院西北生态环境资源研究院,兰州730000

出　　处：《计算机应用》2019年第2期476-482,共7页journal of Computer Applications

基　　金：国家自然科学基金资助项目(61602475);国家密码基金资助项目(MMJJ20170212);甘肃省科技支撑计划项目(1504FKCA096)~~

摘　　要：安全和效率是影响无证书认证组密钥协商协议能否在Ad Hoc网络中得到实际应用的两个关键因素。针对这两个关键因素,以提高Ad Hoc网络安全组通信的安全性和效率为目标,提出一个无证书认证组密钥协商协议,基于椭圆曲线密码体制(ECC)点乘运算实现无配对的无证书认证组密钥协商和身份认证;并使用Huffman密钥树优化通信轮数,以降低计算量和通信量,提高组密钥协商效率。安全分析和性能分析表明,与现有基于无证书的组密钥协商协议相比,所提方案在组密钥协商时具有较高的效率和安全性,可以满足资源受限条件下组密钥建立以及组成员变动带来的密钥更新问题。Security and efficiency are two key factors that affect whether a certificateless authenticated group key agreement protocol can be applied in Ad Hoc networks.To improve the security and efficiency of key management problems in securing group communications of Ad Hoc networks,a certificateless group key agreement protocol was proposed,which utilizes Elliptic Curves Cryptography(ECC)multiplication to achieve the group key agreement and authentication without pairing.Meanwhile,the Huffman key tree was used to optimize the rounds of key negotiation,decreasing the computation and communication overheads and improving the group key negotiation efficiency.Security analysis and performance comparison demonstrate that the proposed protocol has good efficiency and security in group key negotiation,which can satisfy group key establishment and rekeying for dynamic groups with restrained resources.

关 键 词：Ad HOC网络 无证书公钥密码体制 组密钥 密钥树 无证书认证组密钥 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]