A New Key Maagement System for The Super-Large-Scale Communication Network

高度计算机化社会的发展产生了一个新的重要问题--信息安全。解决这一问题的有效方案之一是引入密码学，其中最重要的问题是如何共享公钥。在本项目中，我们推动了一种适用于超大规模密码通信网络的新型密钥管理系统的研究。其基本思想是提出了基于身份的密码体制的概念，并提出了一种新的创新思想，即生成一个原始的克隆密钥生成中心，以减轻密钥生成中心的负担。首先，研究了一种新的基于身份的密钥共享方案，该方案易于实现，对用户的合谋攻击也是安全的。然后，我们成功地从时间原始生成了一个克隆密钥生成中心。利用克隆密钥生成中心构建的层次化密钥生成中心，可以实现超大规模通信网络中的MSIL型密码通信，并在PC集群系统上实现，验证了该密钥管理系统在实际密码通信网络中应用的可能性。

The development of highly computerized society has generated a new important problem of "information security". One of effective schemes to cope with this problem is to introduce the cryptography, where the most important ploblem is how to share a common-key.In this project we have promoted the research on a new key management system for the super-large-scale cipher communication network. The basic ideas are the concept of identity-based cryptosystem, and a new creative idea to generate a clone key generation center of the original to decrease the load of key generation center. First, we have studied a new realization scheme of identity-based key sharing scheme which can be implemented easily and is secure even for the user's collusion attack. Then we have succeeded to generate a clone key generation center from time original. As a result the msil-type cipher communication in the super-large-scale communication network can be realized using the hierarchiically structured key generation center constructed by the clone key generation center.Finally, the possibility to use our key-management system in the real cipher communication network has been certified by implementing it on the PC cluster system.