一种适用于智慧养老的密钥管理机制

An Key Management Mechanism for Smart Service for the Aged

针对智慧养老的物联网系统安全性问题,提出一个密钥管理方案,系统初始化及组密钥分发采用基于身份的加密机制,新成员加入时的组密钥更新采用对称加密机制。分析表明方案具有较好的安全性,系统开销方面,在计算开销可接受的基础上,有效降低了节点的存储开销和组密钥更新时的通信开销。同时方案具有较好的可扩展性,适用于资源受限的智慧养老的物联网系统。

For the security of IOT system of smart service for the aged,a key management scheme is proposed. The identity-based encryption mechanism is used in process of system initialization and group key distribution,and a symmetric encryption mechanism is used for rekeying group key when a new member joins. The analysis shows that the scheme is in good security. In terms of system overhead,on the basis of acceptable computational overhead,the storage overhead of the node and the communication overhead of rekeying the group key are effectively reduced. At the same time,the scheme has good scalability and thus it is suitable for resource-limited IOT systems of smart service for the aged.