Authentication group key management method based on identity

Abstract

The present invention discloses a identity-based authentication group key management method which comprises the following steps: embedding ID into key with bilinear pairing in elliptic curve; generating Ci as part of main key ui according to the secret key and ID of group member ui by key generating center, and transmitting the Ci to ui through overt channel; generating main key according to Ci and its own secret key by each group member ui; calculating overt key verification information according to Hash value of main key and over key by each group member, and broadcasting the link between over key and verification information inside the group; calculating the secret value sharing with left and right neighbors when the received information is verified to be true by each group member, and calculating the group member information Xi included in group session key according to the secret value, and then broadcasting the Xi inside the group; calculating group session key K according to all Xj, j=1, ...,n, by each group member. The invention has the advantages of no key escrow and no need of secure channel, which can be applied in coordination and distributed network as secure reliable group communication.

Description

technical field [0001] The present invention relates to the technical field of network security, in particular, an identity-based authentication group key sharing and management method, which can be used for safe and reliable group communication in collaborative and distributed network applications, such as multicast, audio Video conferencing, online collaborative games. Background technique [0002] It is well known in the industry that in many collaborative and distributed network applications, such as multicast, audio and video conferencing, and network collaborative games, safe and reliable group communication is a key issue. Group session key sharing and management can solve this problem well. Basic security services provided by a secure group communication system include data confidentiality, integrity, membership authentication, and access control. A common way to achieve restricted access to information is to encrypt group messages. These security services can be ...

AI Technical Summary

Problems solved by technology

Scholars at home and abroad have proposed many methods in this regard, and the main problems focus on the following aspects: (1) A secure channel needs to exist between the key generation center KGC and the group members in advance, which is a very harsh requirement in practice. Requirements; (2) There is implicit key escrow, which is sometimes undesirable; (3) The key negotiation process generally requires O(n lgn) or O(n) rounds of communication, and the network communication burden is relatively large; (4) The calculation efficiency is poor, generally O(n lgn) or O(n) pairing operations are required

Images