结构化公开加密密钥支撑群组密钥操作研究

加密解密协议中的单加密解密密钥结构不能满足群组密钥管理的性能需要，公开加密密钥更新导致全部解密密钥更新。针对这一问题，提出结构化公开加密密钥组织结构，满足密钥独立性的群组解密密钥集合成员具有有限修改公开加密密钥的能力，使得群组成员在无可信中心支持下采用自配置方式更新公开加密密钥，更新后的公开加密密钥不会破坏非更新成员解密密钥的合法性。给出的公钥结构丰富了解密密钥和加密密钥之间的关系，扩展了群组密钥操作，适合环境苛刻的网络群组密钥管理。

Group key operations based on structured public key

The structure of public encryption key cannot meet the performance requisition for group key management based on one decryption key one encryption key algorithm. All group members need to participate in rekeying if the public encryption key is updated. To solve the problem, a structured public encryption key is proposed. Decryption keys are composed into a key set, any decryption key with key independence from the set has limited capability to modify the public encryption key, so the rekeying implements successfully by self configuration mode without support of powerful trusted entity, and the new public encryption key does not break the validity of other decryption key members. In this perspective, the proposed public encryption key structure enriches the relationship between decryption key and encryption key, and extends the key operations for dynamic groups. Besides, it is particularly adaptable to group key management of networks in harsh environment.