基于MANET虚拟骨干网的密钥管理体系的研究（增刊）

本文研究了适合于二级和三级MANET虚拟骨干网结构的密钥管理体系。通过比较分析，我们证明(1) 分布集中式适合具有二级虚拟骨干网结构的MANET网络，叶子节点均匀分布可最大程度减少密钥更新的数量；(2) 两级集中式一级分布式适合具有三级虚拟骨干网结构的MANET网络；(3) 相同条件下，三级密钥管理体系比二级密钥管理体系性能优越。我们将研究结果作为补充条件优化了现有的MANET虚拟骨干网生成算法，仿真结果显示，优化后的MANET虚拟骨干网密钥更新的通信开销大大减少。

The Research of Key Management Architecture for MANET with Virtual Infrastructure

Group keys have been applied to mobile Ad Hoc networks (MANET) to assure secure communication. This paper presents key management architectures for MANET with two-layered and three-layered virtual infrastructure. The analysis showed that (1) the distributed-centralized architecture is more suitable for two-layered MANET, when the leaf nodes averagely located under each gateway node, the rekey messages would be optimized; (2) when the number of the first layer gateway nodes keep in a small scale, the two-distributed-one-centralized key management architecture is more suitable for three-layered MANET. (3) Based on the same condition, the three layered key management architecture will achieve less communication cost comparing with the two layered ones. We optimized the MANET virtual infrastructure protocol with these conditions. The simulation results showed that it can improve the communication efficiency.