适用于P2P网络的分布式认证机制

Distributed authentication scheme for P2P networks

针对现有认证方案不能适应P2P网络动态性强的特点,对现有的门限签名方案进行了研究,提出了一种分布式认证机制。采用了基于门限签名的动态认证方案,将网络中的节点分成若干个共享组,并在共享组中使用可验证的门限签名算法。当网络中的总节点数改变时,参与认证的节点数也会相应的改变,这种机制具有很强的动态性,更适应不断改变的P2P网络。仿真实验结果表明,该机制在参数选取得当时能够满足P2P网络的安全需求。

The existing authentication scheme is not quite suitable for P2P networks, because nodes may join and withdraw from networks frequently. To solve this problem, a novel distributed authentication scheme based on dynamic threshold signature algorithm is presented. Nodes in the network are divided into a number of shared groups, and a verifiable threshold signature algorithm is used in each share group. When the overlay network becomes larger or smaller, the needed number of nodes in the authentication process changes correspondingly. The experiments show that the distributed authentication scheme can do better in the P2P networks when the parameters are properly chose.