基于多项式分享的分布式认证方案

针对门限加密系统基于附加和密钥分享方式的分布式认证方案存在的密钥管理复杂、计算耗时和强键性差等不足，提出基于Shamir多项式分享方式的一种新的分布式认证方案．分析方案的可用性和先进性，给出基于多项式分享方式的认证模型和具有容错能力的密钥更新同步算法，描述了密钥生成、分发以及认证签名协议的过程．建立以管理员和共享服务为主要构成的有限状态机的状态转换模型，介绍了超时处理和失败机制．该方案不仅具有入侵容错、均衡负载等功能，而且具有灵活的扩充性、很好的强健性和安全性．

Scheme of distributed certification based on polynomial share

For the complexity of key management, time-consuming of key computing, and the weakness in robustness of ITTC (intrusion tolerance via threshold cryptography) system based on additive share, this work presented a new scheme based on polynomial share. A basic model of distribution certification was discussed, and a secret refreshing solution which could tolerate faults was given. Furthermore, the construction and distribution of the key and the procedure of the certification protocol were described. The work also constructed a model of finite state automation which consisted of admin and share server scheme, and put up the failure mechanism and the overtime solution. The new scheme has good fault tolerance and balance loads, and can scale flexibly and communicate robustly.