基于智能合约的轻量级动态密钥管理方案  

Lightweight dynamic key management scheme based on smart contract

作　　者：谷良 宫鑫 黄达成 任晓刚 张萌楠 陈永乐 GU Liang;GONG Xin;HUANG Da-cheng;REN Xiao-gang;ZHANG Meng-nan;CHEN Yong-le(Information and Telecommunication Brach,State Grid Shanxi,Taiyuan 030021,China;Shanxi Liantuo Limited Company,Taiyuan 030021,China;College of Information and Computer,Taiyuan University of Technology,Jinzhong 030600,China)

机构地区：[1]国网山西省电力公司信息通信分公司,山西太原030021 [2]山西联拓科技有限公司,山西太原030021 [3]太原理工大学信息与计算机学院,山西晋中030600

出　　处：《计算机工程与设计》2023年第9期2601-2609,共9页Computer Engineering and Design

基　　金：山西省重点研发计划基金项目(201903D121121,201701D111002)。

摘　　要：针对现有物联网分布式密钥管理系统存在的密钥分发不灵活、身份信息一致性维护开销大和密码协议设计复杂等问题,提出一种基于身份密码框架IBC和基于证书密码框架PKI机制融合的分布式轻量级动态密钥管理方案。融合IBC和PKI优势设计出一种动态密钥生成模型,提高密钥管理的安全性和灵活性。重新设计智能合约实现密钥管理过程中的去中心化身份验证,降低密钥协议设计复杂度和身份信息一致性维护开销。与现有方案进行性能和安全性对比,验证了该方案理论正确,能够抵挡恶意服务器攻击等两类敌手攻击,安全性更高。The distributed key management systems existing in IoT have many weaknesses to be improved.Key distribution isn’t very flexible,the cost in maintaining the consistency of identity information is high,and the designed protocols needed to be complex enough to keep IoT system away from malicious attacks.A lightweight dynamic key management scheme that integrated the advantages of identity-based cryptograph and public key infrastructure was proposed.With the advantages of IBC and PKI,a dynamic key generation model was designed to achieve secure and flexible key management.And some smart contracts were redesigned to realize the decentralized authentication management in key management,with the simpler key protocol design and the lower cost in maintaining the consistency of identity information.Compared with performances and safety of current schemes,it is verified that the security theory of the protocol is correct,and it can resist on malicious server attacks and other two class adversary attacks,with higher security.

关 键 词：物联网 密钥管理 智能合约 动态密钥生成 身份加密体制 无安全通道 两类敌手攻击 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]