基于MANET虚拟CA私钥生成分布算法研究

移动AdHoc网络(MANET)由于自身的特性和特殊应用使其近年来逐步得到学术界的关注和研究。其所固有的大部分特性也正成为潜在的脆弱点,使其更易遭受各种安全威胁。在基于分布式PKI/CA体系的安全解决方案中如何生成和分发虚拟CA密钥将是一个突出的问题。文章对现有的几种方案进行了分析讨论,指出了其中存在的问题,并就此提出了一种基于门限RSA密码体制的分布式CA密钥共享生成机制,通过分布式算法由CA节点协作生成其私钥共享,提高了系统的鲁棒性和安全性。

Research on Distributed Generation Algorithm of Virtual CA Private Keys for MANET

Mobile Ad hoc NETworks (MANET) has received critical attention from academia in recent years for its intrinsic features and special applications.The most nature of MANET makes them very vulnerable to security threats.Generation and distribution of shared keys for virtual CA (Certification Authority)is challenging in security solution based on distributed PKI/CA.Those solutions that have been proposed in the literature and some issues are discussed.This paper propose the solution of distributed generation of shared CA keys based on threshold RSA cryptosystems,and the security and robustness of CA system is enhanced through distributed genera- tion algorithm by a collection of CA nodes.