According to the importance of group key management for satellite network, a group key management based on secret-sharing with authentication ability is proposed in this paper. On the basis of dynamic topology,an ID registration authority is designed,which provides identity authentication and guarantees validity of node. In order to improve the performance of group key generations group key share distribution center is built up,which can reduce the communication overheads. Moreover,group key is achieved without secure channel in this scheme. Security and performance analysis show that the proposed protocol not only has strong security, but also has less computational and communication costs. Parameter analysis shows that the value of threshold and period of group key updating are main factors affecting the security of this protocol.%针对卫星网络组密钥管理的重要性,提出了一个可认证的基于门限秘密共享的组密钥管理方案.结合卫星网络的动态拓扑结构特点,将地面站作为组成员的身份注册中心,以实现对组成员的身份认证,确保节点的合法性.为了提高组密钥的生成效率,选取t-1颗可见时间长的卫星构建组密钥份额分发中心,降低了组密钥联合生成过程中的通信量.组密钥协商无需安全信道,节省了系统资源.安全性及性能分析表明,该方案不仅具有较强的安全性,而且还具有计算和通信量小的优点.参数分析表明,门限值k与组密钥更新周期T是影响方案安全性的2个重要因子.
展开▼
