一种基于身份的无可信中心密钥管理方案研究

Research on new identity-based key management scheme without trusted party

传统基于身份的密码系统存在着密钥托管和密钥撤销两大难题。针对该问题,提出一种新的基于身份的无可信中心密钥管理方案。方案利用Weil对的特性和单向函数的稳固性,结合Fujisaki-Okamoto混合变换,借鉴BF方案的时间片思想,添加显式的密钥撤销过程。给出安全性和性能分析。结果证明,此方案安全性较高并在计算效率上有很大提高。

Key escrow and key revocation were the two inherent problems in traditional identity-based Encryption System.A new identity-based key management scheme without trusted party was proposed against these problems.This scheme took advantage of the feature of Weil pairs and the stability of one-way function,combined with Fujisaki-Okamoto hybrid transformation and the thought of time slice in BF-IBE,and added an explicit key revocation process.Finally,the security and performance analysis was given.Result showed that this scheme was more secure,and the efficiency in the calculation was greatly improved.