移动Ad Hoc网络分布式轻量级CA密钥管理方案

为了解决移动ad hoc网络中非对称密钥管理问题,将轻量级CA认证框架与Shamir秘密分享方案相结合,为移动ad hoc网络提出一种新的分布式非对称密钥管理方案。该方案采用分布式轻量级CA证书认证机制实现本地化认证,不需要证书管理。结合无证书密码系统的优势,避免了基于身份密钥管理方案中节点私钥托管的问题,并且具有抵抗公钥替换攻击的能力。安全分析和实验结果表明,该方案具有很好的安全性和较高的实现效率。

Distributed Lite CA Key Management Scheme in Mobile Ad Hoc Networks

In order to solve the problem of asymmetric key management in mobile ad hoc networks, a new distributed asymmetric key management scheme basing on lite CA public key authentication framework and Shamir secret sharing scheme was presented for mobile ad hoc networks. The public key could be certified locally by the mechanism of distributed lite CA certification authentication and so the certification management was not need in the scheme. It also avoided the inherent key escrow problem in identity-based cryptography to combine with the advantages of certificateless public key cryptography and provided the ability to resist the public key substitution attacks. Security analysis and experiment results showed that the scheme is secure and efficient in implementation.