Distributed Shared Key Generation Procedure Using Fractional Keys

摘要

We present a new class of distributed key generation and recovery algorithms suitable for group communication systems where the group membership is either static or slowly time-varying, and must be tightly controlled. The proposed key generation approach allows entities which may have only partial trust in each other to jointly generate a shared key without the aid of an external third party. The group collectively generates and maintains a dynamic group parameter, and the shared key is generated using a strong, one-way function of this parameter. This scheme also provides perfect forward secrecy. The validity of key generation can be checked using variable secret sharing techniques. The key retrieval method does not require the keys to be stored in an external retrieval center. We note that many Internet-based applications may have these requirements. Fulfillment of these requirements is realized through the use of fractional keys a distributed technique recently developed to enhance the security of distributed systems in a non-cryptographic manner.