一种具有等级结构的IBE密钥管理方案

摘要

基于标识的加密机制的出现解决了公钥密码体制中证书管理的问题,但由于用户公钥完全公开且不易更改,IBE机制的密钥管理问题成为讨论焦点.具有等级结构的身份密码体制(HIBE)的提出,解决了单个私钥生成中心(PKG)无法满足大用户量应用环境的负担和安全保障问题.文章提出的HKM方案解决了HIBE的PKG层次图中存在多父节点用户的复杂层次关系,并通过引入通配符的IBE方案,提出了基于WIBE的等级结构密钥管理方案.%Identity-based encryption mechanisms have appeared to solve the problem of certificates management. However, the issue of key management becomes the focus of attention because the public key of a user is fully open and not easy to modify. In order to reduce the burden of a single PKG, hierarchical IBE has been proposed. HKM proposed in the paper has addressed the complex hierarchy of HIBE with users of multi-parent PKG nodes, and put forward a key management scheme based on WIBE.