基于身份的群组密钥分发方案  

Identity Based Group Key Distribution Scheme

作　　者：王后珍[1,2] 秦婉颖 刘芹 余纯武 沈志东[1] Wang Houzhen;Qin Wanying;Liu Qin;Yu Chunwu;Shen Zhidong(School of Cyber Science and Engineering,Wuhan University,Wuhan 430072;Advanced Cryptography and System Security Key Laboratory of Sichuan Province(Chengdu University of Information Technology),Chengdu 610054;Key Laboratory of Aerospace Information Security and Trusted Computing(Wuhan University),Ministry of Education,Wuhan 430072;School of Computer,Wuhan University,Wuhan 430072)

机构地区：[1]武汉大学国家网络安全学院,武汉430072 [2]先进密码技术与系统安全四川省重点实验室(成都信息工程大学),成都610054 [3]空天信息安全与可信计算教育部重点实验室(武汉大学),武汉430072 [4]武汉大学计算机学院,武汉430072

出　　处：《计算机研究与发展》2023年第10期2203-2217,共15页Journal of Computer Research and Development

基　　金：国家自然科学基金项目(62272348,62272385,62272389,U19B2021,U20B2064);先进密码技术与系统安全四川省重点实验室开放基金(SKLACSS-202203);国家重点研发计划项目(2022YFB4500800);中央高校基本科研业务费专项资金(2042022kf002);湖北省重点研发计划(2022BAA041)。

摘　　要：随着人们越来越倾向于使用即时通讯软件进行交流,保障群聊中消息的安全性成为一个亟需解决的问题.因此,基于国密SM9算法提出了一种基于身份的群组密钥分发方案,并进行了严格的安全性证明;提出的方案相较于Guo等人、Meng等人提出的方案在便捷性和兼容性上更具优势,同时,相较于Wu等人在欧密会上提出的非对称群组密钥协商协议也有群组密钥管理和兼容性方面的优势.此外,还给出了所提方案在即时通讯群聊及点对点通信场景下的应用示范,进一步证明了所提方案在通信开销和密钥管理方面要优于目前典型即时聊天软件中的安全群聊实现方法.As people are increasingly inclined to use instant messaging software for communication,ensuring the security of messages in group chats has become an urgent issue.Therefore,we propose an identity-based group key distribution scheme based on the national cryptographic algorithm SM9 and provide rigorous security proofs.The proposed scheme has advantages over the ones introduced by Guo et al.and Meng et al.in terms of convenience and compatibility.Additionally,our scheme outperforms the asymmetric group key agreement protocol proposed by Wu et al.at the Eurocrypt in terms of group key management and compatibility.Furthermore,we provide application demonstrations of the proposed scheme in both instant messaging group chats and peer-to-peer communication scenarios,further proving that the proposed scheme outperforms current typical secure group chat implementation methods in terms of communication overhead and key management in instant messaging software.

关 键 词：群组密钥分发 基于身份的密码学 即时通信安全 群聊消息加密 SM9算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]