一种用于Ad Hoc网络的分布式证书撤销算法

A Distributed Algorithm of Certificate Revocation for Ad Hoc Network

分析了AdHoc网络安全基础设施存在的问题,提出了一种用于AdHoc网络的分布式证书撤销算法.该算法把证书的撤销分为无条件撤销和有条件撤销两类.利用撤销矩阵R(T)和权值向量W(T)分别对网络节点之间的撤销关系和网络节点的可信度进行描述,并引入撤销影响因子α来限制单个节点撤销操作的力度,增加多节点联合撤销的力度,以提高撤销的可靠性.通过权值迭代关系式逐步实现网络运行过程中权值的不断更新变化.最后定量分析了分布式证书撤销算法的可靠性,以及撤销影响因子α的取值和其对证书撤销可靠性的影响.

After analyzing the problem of security infrastructure of ad hoc network, a distributed algorithm of certificate revocation for ad hoc network is presented. In the algorithm, certificate revocation is parted into unconditional revocation and conditional revocation. With using revoking matrix R(T) and weight vector W(T) to describe revoking relationship and creditability of network nodes, a revoking effect factor α is introduced to limit revoking strength of single node and increase united revoking strength in order to improve reliability of revoking. By using iterative equation of node weight, the node weight is updated continuously in network running. Finally, the reliability of the distributed algorithm of certificate revocation, the value of the revoking effect factor α and its effect on certificate revocation are analyzed quantitatively.