分布式路由系统中的安全机制及其密钥生成技术

Security architecture and key generation algorithm for distributed routing systems

针对大规模分布式路由系统的安全保障问题 ,考虑到公钥密码系统在身份认证和密钥管理上的巨大成功 ,给出了一种基于公钥密码系统的安全机制。此安全机制去掉了一般安全系统中的密钥分配中心或者认证中心 ,因而减少了单一失效点 ,提高了系统的扩展性 ;同时分析了在这种机制中使用的密钥生成算法及其复杂性。此算法由各个分布的密钥生成器独立执行 ,在给定的约束条件下 ,可生成全系统唯一的包含强素数的

A distributed routing system (DRS) forwards the packets between its routers according to the routing information. The DRS authenticates the routing information and confidentiality of the packets. A public key system is presented to ensure the DRS security because of the success of the public key system in authentication and key management. The RSA key generation uses an enhanced strong method to improve the security. The algorithm is executed separately in a distributed key generator and can ensure the uniqueness of keys by constraints assign to each key.