Distribution type dynamic secret key management method

Abstract

The invention discloses a distributed dynamic key management method. When the network is initialized, the trusted center distributes subkeys and subkey generation bases to each user who initially forms the network, and generates a network key; the method The following steps are also included: A. Determine the subkey issuing user, and a new user joining the network requests the subkey issuing user to issue a subkey; B. The subkey issuing user selects t users who obtain the subkey to form a subkey C. Each user in the subkey issuance set uses its own subkey to issue the main part of the subkey and the subpart of the subkey to the new user. This method uses the (t, n) threshold secret sharing principle to realize the distribution of sub-keys for the users who initially formed the network in the distributed network, issue sub-keys for new users who join the network through the round-trip hop-by-hop method, and provide The process of updating sub-keys by all legitimate users in the network also proposes a solution for multi-key sharing.

Description

technical field [0001] The invention relates to network security technology, in particular to a distributed dynamic key management method. Background technique [0002] Mobile ad hoc network (MANET, Mobile Ad hoc Network) is a special distributed mobile network without wired infrastructure support; it is a base station-free, multi- Jump, temporary autonomous network system. MANET has the characteristics of rapid establishment, flexibility, and freedom from wired network constraints. It is mainly used in special or emergency environments such as military battlefields, flood fighting and rescue, and no wiring, and has characteristics that general communication networks do not have, such as: network self-organization, dynamic network topology, limited wireless transmission bandwidth, and vulnerability to attack. Due to the wide application of MANET, it has become a research hotspot in the field of wireless communication, but a perfect security mechanism is an important prere...

AI Technical Summary

Problems solved by technology

[0009] The technical approach is deficient in that it does not provide a process for issuing subkeys for new users

This method not only greatly increases the computing overhead of network users and the entire system, but also imposes a heavy burden on the entire distributed network and users in the network; moreover, this method does not include the processing method for new network users, It is impossible for new users to join the network to share the network key in the network, and it is not conducive to the further expansion of the network

Images