MANET中基于邻居节点权值的可验证组密钥更新算法

A Neighbor-Weight-Based Verifiable Group Rekeying Algorithm in MANET

相对于传统有线网络集中化组密钥管理协议和算法,门限秘密共享技术能很好地适应移动自组网(MANET)的特点,提供高效可靠的安全保证。为了防止退出节点合谋重构组私钥威胁组通信安全,安全高效的组密钥更新算法是关键。在对合谋问题进行深入分析的基础上,本文提出了基于邻居节点权值的可验证的组密钥更新算法。该算法在保持组私钥不变的情况下主动更新组成员的私钥份额,有效地解决了节点合谋、更新通信量大、恶意节点参与更新等问题。

The threshold secret sharing technology is more adaptable to mobile ad hoc networks（MANET） than the centralized group key management protocol and algorithms in traditional wired networks. It provides efficient and reliable security guarantees for MANET. A secure and efficient group rekeying algorithrn is very important to prevent the members who have left the group from colluding to reconstruct the group key,which is a threat to the security of group communications. In this paper, a rekeying algorithm named NW＇VGRA is proposed which is based on a deep analysis of member collusion behaviors. The algorithm renews proactively the key share of members while maintaining an unchanged group key, defeats mem- ber collusion attacks,reduces the rekeying traffic,and restricts malicious members involved in rekeying.