基于身份和门限秘密共享的密钥管理方案

Key Management Scheme Based on Identity and Threshold Secret Sharing

提出一种适用于无线Mesh网络的基于身份和门限秘密共享的密钥管理方案。该方案采用门限秘密共享技术实现系统私钥的分布式生成和传输,无需公钥证书的参与,只需在离线可信任机构处进行注册,将用户身份标识作为公钥,从而降低用户终端的存储和计算代价,并且可实现系统和用户私钥的周期性更新。分析结果表明,该方案安全性高、实用性强。

This paper presents key management scheme based on identity and threshold secret sharing which is applies to Wireless Mesh Network（WMN）.It uses threshold secret sharing to realize the system private key distributed generation,without the participation of the public key certificate,just registers on offline of Certificate Authority（CA）,gets the user identity as a public key,which greatly reduces the user end computing and storage capacity needs,realizes the system and user private key of the periodic update.Analysis results show that the scheme has high safety and strong practical.