基于身份和三叉树的可认证群密钥协商方案

An Authenticated Identity and Triple Tree Based Group Key Agreement Scheme

将基于身份的密码机制和三叉树引入到群密钥协商中,提出了一种高效的基于身份的可认证的群密钥协商方案。该方案不依赖数字证书提供认证,计算开销降低到O(log3n)。群长期密钥的引入以及群密钥中长期密钥和临时密钥的结合,使得该方案提供了密钥独立、完善前向保密和隐含密钥认证等安全属性。文章的设计思想可以作为把可认证的两方和三方密钥协商协议扩展到多方的一种通用方法。

Identity-based Encryption and triple tree are introduced into group key agreement schemes.An efficient authenticated identity and triple tree based group key agreement scheme is proposed.The scheme provides authentication independent of digital certification and its computational cost is reduced to O（log3n）.The scheme provides key independence,perfect forward secrecy and implicit key authentication because of the introduction of group long-term key and the combination of long-term and short-term keys in the group key.The idea of this paper can be used as a general method to extend authenticated two-party and three-party key agreement protocols to group settings.