一种关于SM9的安全密钥分发方案  

A SECURE KEY ISSUING SCHEME OF SM9

作　　者：许盛伟[1,2] 任雄鹏 袁峰[1] 郭春锐 杨森 Xu Shengwei;Ren Xiongpeng;Yuan Feng;Guo Chunrui;Yang Sen(Beijing Electronic Science and Technology Institute,Beijing 100070,China;School of Telecommunications Engineering,Xidian University,Xi an 710071,Shaanxi,China)

机构地区：[1]北京电子科技学院,北京100070 [2]西安电子科技大学通信工程学院,陕西西安710071

出　　处：《计算机应用与软件》2020年第1期314-319,共6页Computer Applications and Software

基　　金：国家重点研发计划项目(2018YFB0803600)

摘　　要：通过分析Wang等[12]关于BF-IBE的密钥分发方案,指出其潜在的数据库泄露攻击与篡改攻击;由于Geisler等[15]的关于SK-IBE的密钥产生方案未提出安全密钥分发协议,因此对前两者进行改进并提出一种关于SM9的可分离匿名分布式密钥产生分发(SADKI)方案。与几种同类型方案对比结果表明,该方案是安全高效的,实现了无对运算,不需要安全通道,具有可分离和匿名性,能够抵抗KGC数据库泄露攻击、篡改攻击、离线口令攻击。By analyzing the key issuing scheme of BF-IBE proposed by Wang et al.,this paper points out the potential database leakage attack and tamper attack.As Geisler et al s key generation scheme of SK-IBE does not propose the secure key issuing protocol,this paper improves both schemes and proposes a separable anonymous distributed key issuing(SADKI)scheme of SM9.Compared with several similar schemes,the results show that the scheme is safe and efficient.It achieves non-pairing operation,does not need a secure channel,and has separable and anonymous attribute.And it can resist KGC database leak attacks,tamper attack and offline password attacks.

关 键 词：SM9 分布式密钥产生 密钥分发 密钥托管 无双线性对 

分 类 号：TP3[自动化与计算机技术—计算机科学与技术]