基于门限的分布式会议密钥管理方案

A Distributed Conference Key Management Scheme Based on Threshold Cryptography

会议密钥管理通过为参与组通信的成员生成、分发和更新会议密钥来满足加密认证等安全需求。基于可验证秘密分享机制和门限密码技术,提出了一种可验证的分布式会议密钥管理方案,方案不仅能满足前向安全性和后向安全性,而且能抵制恶意节点的主动攻击和拒绝服务攻击。同时,方案中的秘密份额更新算法能有效抵制退出节点的合谋攻击。

Conference key management for muhicast is used for group members in one mtdticast session to generate, refresh and transfer conference key, which is used for encryption and authentication. Based on the verifiable secret sharing mechanism and threshold cryptography, a new verifiable distributed conference key management scheme is proposed. The presented scheme can not only satisfy the forward confidentiality and backward confidentiality, but also resist active attacks and denial of services. It also presents an efficient algorithm for updating the group secret share and proves that can resist the coalition of the left nodes.