分布式应用中的多级安全密钥管理

摘要

本文提出一种分布式应用中的多级安全密钥管理体制，该体制采用BELL-LaPadula模型作为多级安全存取控制策略，利用中国剩余定理，引入“主密钥因子”，“次密钥因子”，“写入因子”，构造会话密钥的共享信息，该体制具有高效，安全，动态的特点.这种体制有广泛的应用前景，有效的解决了网上会议，网上讨论等实际应用中的密钥管理问题.%A key management scheme for multilevel security in distributedapplications is presented.The scheme adopts BELL-LaPadula model as multilevel access control policies.We use Chinese Remainder Theorem,introduce the notions of first-secret-key-element,second-secret-key-element and writing-element,and construct sharing information of session key.The scheme is efficient,secure and dynamic.At the same time,there are many practical applications involving the scheme for key management such as meeting in the network and talking in the network etc.