基于可信计算的群内安全信息共享混合模型

Group-Centric Secure Information Sharing Hybrid Model Based on Trusted Computing

针对广受关注的秘密信息的安全共享问题,提出一种基于可信计算的群内安全信息共享混合模型.基于分裂密钥RSA(split-key RSA)算法,综合超级分发和微分发的优点,提出一种新的混合架构,在不影响安全性的情况下,对密钥进行了统一的分割,将控制中心端的密钥参数缩短为32bit,并且不随RSA的强度而变化,使得控制中心端的在线计算量显著降低,RSA2048模式下降低为原来的1.6%.原型系统验证对比测试结果表明,系统的运行效率有了较大提高,RSA2048模式下系统的读请求响应时间降低到原来的5%以下.

This paper proposed a group-centric secure information sharing（g-SIS） hybrid model based on trusted computing. Based on split-key RSA, a novel hybrid distribution architecture integrating super-distribution and micro-distribution was proposed. Without affecting the security of the model, the keys were split in the same way, and the keys owned by the control center were shortened to 32 bits, disregarding the length of RSA. The online computing quantity of the control center was reduced distinctly. Under RSA2048, it was reduced to 1.6 % of the original quantity. The prototype test showed that the efficiency of the system was greatly improved. Under RSA2048, the responding time of read access requests was reduced to less than 5 % of the time in the original model.