Generation and authentication method of self-certified public key of mobile self-organized network

Abstract

The invention discloses a management method of self-certified public key of a mobile self-organized network on the basis of ECC, comprising the following steps: a shared key is distributed to n virtual central nodes by threshold cryptology; a user chooses a secret random number to calculate a public parameter, and identity and the public parameter are sent to a nearby virtual central node A1; A1 contacts with other virtual central nodes and sends the user information to the nodes; each publisher Ai chooses a random secret integer and calculates as well as broadcasts a self-certified public key subblock Qi to other publishers according to the secret integers and parameters published by the user; each publisher Ai calculates a self-certified public key Q, a sub-signature xi and an intermediate quantity Ri and sends (r, I, xi and Ri) to a synthesizer; the synthesizer calculates and synthesizes a signature x after all sub-signatures are qualified after authentication and sends Q and x to the user; the user calculates a secret key s according to the x; and the authenticity of the self-certified public key of the user is verified. The invention has no certificate management, no key escrow and no secure channel, so that the invention is suitable for the safe communication of the mobile self-organization network with limited resource.

Description

technical field [0001] The invention belongs to the technical field of network security, and relates to a self-authenticated public key, specifically, a method for generating and verifying a self-authenticated public key in a mobile ad hoc network, which can be used to provide security and trust system establishment in a mobile ad hoc network Basic technical support. Background technique [0002] In the public key cryptosystem, in order to ensure that the public key will not be replaced, there are generally three methods: certificate-based, identity-based and self-authentication. The certificate-based method is based on the public key infrastructure (PKI), and there are complex certificate management problems. The identity-based method directly uses the user's identity information as its public key, and there is no certificate storage and management problem, but its disadvantage is that it has key escrow, and the trusted center can know the secret key of all users. Another ...

AI Technical Summary

Problems solved by technology

However, the application of the self-authenticated public key system to the mobile ad hoc network still has the following problems: (1) There must be a central server in the network to generate the self-authenticated public key for the user; (2) A secure channel is required to transmit secret information; The self-authenticated public key system has a relatively large amount of calculation; (4) there is a key escrow

Among them, the first two problems are unrealizable in mobile ad hoc networks, and the latter two problems are also unreasonable for such resource-constrained networks, so they need to be avoided as much as possible.