基于权重的伪随机密钥选取的无可信第三方不可否认协议

Non-repudiation protocol with pseudo-random key selection based on the weight in offline TTP model

现实中几乎不存在完全可信的第三方,通信双方使用的会话密钥的选取在一定程度上决定了这次通信的安全系数。为了能让协议不依赖于可信第三方,且使得密钥库中的密钥得以在随机选取的情况下得到最充分的利用,提出了一种基于权重的伪随机密钥选取机制的无可信第三方的不可否认协议,防止某些密钥的使用过于频繁,导致不必要的安全隐患出现。另外,还提出了一种让对方根据收到的密钥标识在密钥库中通过检索来取得此次通信密钥以代替把密钥打包发送的方式,降低了密钥泄露的风险。

Thereis almost no fully trusted TTP in reality,and the selection of the session key used by the communication parties determines the safety coefficient to some extent. The paper comes up with a kind of Non-repudiation protocol with pseudo-random key selection based on the weight in offline TTP model in order to make the protocol be independent of the TTP and make full use of the keys in key-store in the case of random selection. It can prevent some keys from being using toofrequently and cause the emergence of unnecessary security risks.What＇s more,it also presents one way to get the secret keys by searching in key-store instead of sending secret keys by messages to reduces the risks of keys leakage.