摘要
针对有实时性需求的分布式组通信应用问题,提出基于哈希函数和BD协议的组密钥更新机制.建立以种子成员为主导的组密钥管理模型,密钥更新主要发生在局部范围,不会引起大范围的信息耦合现象.BD协议降低了组密钥链种子参数的生成时间,从而降低了密钥更新的时间.安全性,健壮性和效率分析表明:提出的组密钥更新机制在满足实时性要求的前提下,能保证信息的前向机密性和后向机密性.相对于Io-lus模型,不仅消除了GSC与GSI处单点失效引发的1toN问题,且不需在GSI处的转发环节,消除了GSI处的数据瓶颈问题.
A scheme of re-keying management based on key chain and BD protocol applied to real-time distributed communication is proposed, The scheme sets up a key management model supervised by seed nodes, in which refreshing key mainly occurs locally so that it would not result in the situation of large-scaly exchanging information. The time cost of refreshing key was reduced because of BD protocol reducing the time cost of creating key-chain' s seed parameter. Under the analysis of security, robustness and efficiency, the scheme can guarantees forward and backward confidentiality yet still achieves the real-time property. Compared with Iolus model, the proposed scheme resolves the 1 to N problem due to single node failure and avoids data bottleneck occurring at GSI.
出处
《哈尔滨工业大学学报》
EI
CAS
CSCD
北大核心
2008年第1期73-76,135,共5页
Journal of Harbin Institute of Technology
基金
国家重点基础研究发展规划资助项目(2005CB321806)
关键词
分布式组通信
实时性
BD协议
组密钥更新管理
distributed group communication
real-time
BD protocol
re-keying management