动态分布式层次密钥管理

Dynamic Distributed Key Management in a Hierarchy

层次秘密通信在电子商务与电子政务以及其他的具有层次结构的系统中有广泛的应用,本文通过利用单向散列函数的不可逆计算的特性,设计了一个单向的等级加密体制的密钥管理方案,上级组结点可以安全容易的获取下级组结点的密钥,反之不然.并且在方案中实现安全组的动态添加、删除及更新组结点密钥.本方案计算量小、存贮要求低,并且可以实现分布式并行化计算.

Secure secret communication in a hierarchy is widely used in e-commerce, e-government affairs or other systems which have a hierarchy structure. A one-way key management scheme for an encryption system in a hierarchy based on the one-way hash function is proposed in this paper, in which one group can obtain the key of its subordinate group securely and easily, but the opposite is not allowed. It is easy to add or delete a security group, and is easy to change the key of a security group. This scheme has the characteristics of needing low computation and low storage, being high distributed and having parallel computing.