群组安全通信的关键技术研究

《群组安全通信的关键技术研究》由会员上传分享，免费在线阅读，更多相关内容在工程资料-天天文库。

1、有许可控制功能的群组密钥协商方案0•基于身份的许可控制方案首先提出一种基于身份的许可控制方案,不依赖于复杂的p&I使整个系统更加实用。并初步探讨了与密钥管理方案的结合该方案的设计思想可以作为构造基于身份许可控制投票协议的通用方法。•具有许可控制功能并基于Pairing的群密钥协商利用椭圆曲线上的Pairing在安全属性和灵活性方面的优势本文提出了基于Pairing的许可控制机制然后构造一个三叉密钥树得到一个安全性和性能方面更优的动态对等群组密钥管理方案°另外？该方案解决了许可控制中群组成员身份撤销的问题e许可控制群组密钥协商门跟密码基于身份的密码体制椭圆曲线密码体制，双线性对ABSTR

2、ACTWiththeexplosivegrowthoftheInternet,thereemergemoreandmoregroup-orienteddistributedapplicationsintheopeningnetworkenvironment.Undoubtedly,thereisaneedforsecurityservicestoprovidegroupcommunicationprivacyanddataintegrity.Thisthesisfocusesongroupkeymanagementandadmissioncontrolfordynamicpeergro

3、ups・Groupkeymanagementisthecornerstoneofallothersecurityservices.Itmakesgroupmembersestablishacommonsecretkeyforencryptingorsigninggroupcommunicationdata.Previousresearchongroupkeymanagementhasachievedmanyoutcomes,butmostofthemoverlookedadmissioncontrol.Ifusers5accesstogroupcan'tbecontrolled,key

4、managementaloneisratheruselesstogroupcommunicationsecurity.Anapplicablegroupcommunicationsystemmustonlyallowvalidatedusersjointheprocessofgroupkeyagreement.MostgroupkeyagreementschemesauthenticatemembersusingcertificatesandPKI,andtheexistingadmissioncontrolschemesarealsobasedonPKIandcertificates

5、・Twodisadvantagesarisefromit:thecertificatesneedtobeexchanged,whichconsumesbandwidthbecauseofthelargesizeofcertificates;thesignatureofthePKIneedstobegeneratedandverified,whichiscomputationallyexpensive.Consequently,weuseIdentity-basedcryptosystemtoreplacePKI.hiBecausetheexistingadmissioncontrols

6、chemeshavedrawbacksinperformanceorsecurityattributes,sowepresentanewkindofadmissioncontrolframeworkusingIdentity-basedcryptosystemandthresholdcryptography,andintegrateitwithID・basedgroupkeyagreementtoformamorepracticalgroupkeymanagementscheme.•ID-basedAdmissionControlSchemeItisthefirstadmissionc

7、ontrolschemeusingID・basedcryptosystemsanddoesn'tdependoncomplicatedPKI,whichmakesthesystemmorepractical.Andwediscusshowtocombineadmissioncontrolwithgroupkeyagreement.Theideabehindtheschemecanbeusedasageneralapproachtoconstru