针对移动Ad hoc网络环境中的安全组播通信需求,如何实现具有较低开销同时又足够安全高效的组密钥管理方案一直是个备受关注的问题.通过引入椭圆曲线密码体制的双线性配对,提出一种新的高效的可认证分布式组密钥管理方案.进一步,基于BCDHP( bilinear computational Diffie-Hellman problem)和BDLP( bilinear discrete logarithm problem)假设证明该方案是安全的,能够有效地抵抗假冒攻击和同谋破解攻击.该方案具备完美的前向隐私性和后向隐私性,保证安全组通信中组成员的公平性.与其它方案相比,该方案仅需1轮即可完成组密钥的协商,存储开销、通信开销和计算开销都比较小,非常适合于资源有限的移动Ad hoc网络.%Taking secure group broadcasting communication requirements in MANET environment into consideration, how to realize a group key management scheme that on the one hand costs low and on the other hand offers enough safety and efficiency has been a problem that gains much attention. By introducing bilinear pairing of eclipse curve password mechanism, a novel efficient authenticable distributed group key management scheme is proposed. Based on BCDHP and BDLP assumptions, the scheme is further proven to be safe enough to effectively resist impersonation attacks and collusive crack attacks. The scheme bears perfect forward secrecy and backward secrecy so that it guarantees justice for group members in secure group communications. Different from other schemes, the proposed scheme achieves group key agreement after just one round, costing little on storage, communication and computation. Therefore the scheme is very suitable for resource limited MANET.
展开▼
