多级密钥管理中主密钥的安全保护

Security protection of main key in multilevel key management

针对主密钥的泄露会使其他密钥失去作用,提出了一种基于安全容错性的合成主密钥算法,将主密钥的影子分发给不同的密钥卡和主密钥合成服务器以保护主密钥.利用零知识证明技术可以发现影子被篹改的密钥卡,从而确保当少数部件被攻击后,主密钥的机密信息并没有暴露,而且任何一个在线的部件无法恢复主密钥.通过安全性分析表明:此算法使整个系统具有弹性和抗合谋攻击性,在攻击后能持续工作.

Leaking of the main key will make all other keys lose their functions. An algorithm of synthesizing the main key based on security tolerance is presented to avoid the problem. The main key was protected by distributing its shares to different key cards and the main key synthesizing server. Key cards, whose shares were modified, could be found by zero-knowledge proof technology. The project ensures that the compromise of a few system Components does not compromise the secret information of the main key, and the main key is never reconstructed at a single online location. Security analysis proves that this algorithm makes the whole system have resilience and defence to collusive attack, and the system can keep working after it is attacked.