面向分级文件共享的密钥管理方案研究  

KEY MANAGEMENT SCHEME FOR HIERARCHICAL FILE SHARING

作　　者：李莉[1] 王政 Li Li;Wang Zheng(Beijing Electronic Science and Technology Institute,Beijing 100070,China)

机构地区：[1]北京电子科技学院,北京100070

出　　处：《计算机应用与软件》2020年第7期296-301,333,共7页Computer Applications and Software

基　　金：国家重点研发计划项目(2016YFB0800304)。

摘　　要：天地一体化网络具有海量用户、用户权限变动频繁、不同用户域资源配置差异大的特点。针对传统的多权限群组密钥管理方案难以很好地解决天地一体化网络中多等级文件在共享过程中存在的安全性不足、密钥更新频繁、密钥更新开销大的问题,提出一种树形密钥图的构建和密钥更新方案。采用Shamir门限分割的方法将辅助密钥分割生成的影子密钥作为用户密钥,将群组划分为多个用户区,从而将大部分密钥更新任务限定在用户区之中。仿真实验表明,该方案在保障密钥安全性的前提下能够很好地降低密钥更新开销。Heaven and earth integration network has the characteristics of massive users,frequent changes in user rights,and large differences in resource configuration of different user domains.The traditional multi rights group key management scheme is difficult to solve the problems of insufficient security,frequent key update and high cost of key update in the sharing process of multi-level files in the heaven and earth integration network.In order to solve this problem,this paper proposes a tree key map construction and key update scheme.It used the Shamir threshold segmentation method to divide the shadow key generated by the auxiliary key segmentation as the user key,and divided the group into multiple user zones,thereby limiting most of the key update tasks in the user zone.The simulation results show that our scheme can reduce the key update cost well under the premise of ensuring the key security.

关 键 词：分级文件共享 天地一体化网络 群组密钥管理 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]