A Key Management Scheme for Ad Hoc Networks
A Key Management Scheme for Ad Hoc Networks
复制标题
DOI：
10.1109/wicom.2009.5303186
复制
发表时间：
2009-09
期刊：
影响因子：
--
通讯作者：
Ping Zeng;Ronglei Hu;Yong Fang;Jianxi Yang;Yue Liu
中科院分区：
文献类型：
--
作者：
Ping Zeng;Ronglei Hu;Yong Fang;Jianxi Yang;Yue Liu
在系统模型中引入初始信任，提出了一种新的基于身份的分布式密钥管理方案。该方案应用了可验证秘密共享技术和盲短签名技术。该方案由系统初始化、节点私钥更新、系统私钥共享更新、恶意节点发现和密钥撤销等部分组成。引入初始信任的模型使方案更安全。由于采用了基于身份的公钥体制，减少了存储、通信和计算的开销。可验证秘密共享技术有效地防止了节点的不诚实行为。节点私钥的更新方案提供相互认证。盲短签名保证了私钥共享可以在不安全的信道中传输。密钥撤销是简单和方便的，因为有效时间被添加到密钥。分析表明，该方案不仅提供了更大的安全性，但也提高了效率比以前的方案为ad hoc网络。
With initial trust in the system model, a new identity-based distributed key management scheme is proposed. Verifiable secret sharing technology and blind short signatures are applied into this scheme. The scheme is composed of system initialization, update of a node's private key, share refreshing of system private key, discover of malicious node and key revocation. The model with initial trust makes the scheme more secure. The overhead of storage, communication and computation are reduced since the identity-based public key system is used. The verifiable secret share technology effectively prevents the node from behaving dishonestly. The update scheme of a node's private key provides mutual authentication. The blind short signature ensures the share of private key can be transmitted in the unsecured channel. The key revocation is simple and convenient since the valid time is added to the key. The analysis shows that the proposed scheme not only provides greater security, but also improves the efficiency than previous scheme for ad hoc networks.