Ad Hoc网络中的组密钥生成协议

Group Key Establishment Protocols in Ad Hoc Networks

由于AdHoc网络缺少基础通信设施的支持,网络拓扑的动态变化,使得传统的基于可信任第三方的CA认证方案不再适用,而基于门限加密的分布方案有其固有的假设条件,在具体实施时也有很大的困难。区别于分布方案,该文介绍的组密钥协议不需要有安全信道的假设,所有的节点都参与密钥的生成。该文分类分析了几种协议的前后向安全性,容错性和密钥生成时的认证功能。并在此基础上对协议的复杂度做了比较,给出了进一步完善协议需解决的问题。

The traditional Certification Authority is not applicable in Ad Hoc networks because they have no infrastruc-ture and topology of network is dynamic.The distribution CA services based on threshold cryptography have difficulties in practice because of their strong assumption.This paper introduces several protocols about group key establishment that are contributory in Ad Hoc networks.We analyze them in forward security,fault tolerant and authentication,compare complexity of these protocols and present the problems should be settled in future research.