面向下一代会议系统的分布式密钥管理方案

The distributed conference key management scheme towards next generation conference system

提出了一种基于半信任实体的分布式会议密钥管理方案,解决了会议系统中多子组安全通信问题.多个服务器构成系统"半信任"中心,每个服务器根据Shamir门限秘密共享方案分别产生密钥份额.子组成员被划分为辅助者和普通成员2种不同角色,以提高密钥产生和分发的效率.辅助者利用拉格朗日插值定理恢复密钥份额,计算出子组密钥,并分发给其他会议成员.仿真实验证明了本方案的安全性、健壮性,且效率较高.

The distributed conference key management scheme based on ＂semi-trusted＂ entity is proposed in the paper, to address the problem of secure communication in multi-subgroup for conference system. Several servers consist of the ＂semi-trusted＂ center of the system, each server generates key share respectively according to Shamir＇s threshold scheme. The members in the subgroup are divided into two different roles, coordinator and common member, in order to improve the efficiency of key generation and distribution. Coordinators use Lagrange interpolation function to recover key shares, and compute the key of subgroup, then distribute to other common members. The simulated results indicate the scheme is secure, robust, and highly efficient.