一种IBE机制下的端到端密钥管理方案

密钥管理是基于移动通信系统进行端到端加密的核心问题，现有方案大多依赖于密钥管理中心，并存在不在同一加密组内的终端要进行端到端加密通信时通信消耗大、效率低等问题。为解决这些问题，提出一种基于IBE（Identity Based Encryption）的三级密钥管理方案。该方案适于在资源有限的移动终端上使用，采用IBE机制生成和管理主密钥，简化了密钥协商过程，降低了对密钥管理中心的依赖，使用对称加密算法加密通信信息，确保通信的高效性。通信双方可进行双向认证，具有前向安全性，可抵抗选择密文攻击。

End-to-end key management based on IBE

Key management is the core problem in the end-to-end encryption based on mobile communication system. Most existing schemes depend on KMC（Key Management Center）, and have problems of high cost in communication, low efficiency. A three-layer key management scheme is provided based on IBE（Identity Based Encryption）, which suits to mobile terminals. The master keys are produced and managed under the IBE mechanism, so the flow of key exchange is simplified and the dependency on the KMC is reduced. Communication data are encrypted in symmetric encryption algorithm to ensure the high efficiency. The two sides in the communication can do bidirectional authentication, have forward-security and defence of choose cipher attack.