基于CPK的高效移动Ad Hoc网络密钥管理方案

Efficient key management scheme based on CPK for mobile Ad Hoc networks

移动Ad Hoc网络具有的动态网络拓扑、无线链路的弱安全性、节点的有限物理保护和无中心基础结构等特性,使得它面临严重的安全问题。因此鲁棒的密钥管理服务是移动Ad Hoc网络的安全基础。提出了一个基于椭圆曲线组合公钥方案和门限密码系统的移动Ad Hoc网络密钥管理方案。本方案的主要创新点是提出了三层密钥管理模型,并基于此模型,提出了节点密钥生成、密钥份额分发、节点密钥更新、密钥份额更新和密钥撤销的具体实现。三层密钥管理模型实现较高的安全性和较低的密钥管理开销。与基于证书的和基于身份的密钥管理方案相比,本方案在安全性和效率方面更加适用于移动Ad Hoc网络。

Mobile Ad Hoc Networks （MANETs） face serious security problems due to their unique characteristics such as dynamic topology, vulnerability of weak-secure wireless link, limited physical protection of each node, and lack of central infrastructure. Robust key management services are central to ensuring security of mobile Ad Hoc networks. A novel robust key management scheme for MANETs is proposed based on Elliptic Curve Combined Public Key （ECCPK） scheme and the threshold cryptosystem. The major innovative point of this scheme was the proposal of three-tier key management model to provide high security, low key management [oad. Based on three-tier key management model, the node＇ s key generation, secret share distributing, node＇ s key updating, secret share refreshing and key revocation approaches are proposed. Compared with the security and efficiency of the certificate-based and the identity-based key management schemes, the new scheme is more suitable for the mobile Ad Hoc networks.