An Identity-Based Authenticable Dynamic Group Key Agreement Method

Abstract

The invention relates to an ID-based authenticated dynamic group key agreement method, and belongs to the network communication safety technology field. The method is characterized in that 1, system initialization: a PKG is generated, and system parameters are disclosed; 2, private key extraction generation: every user sends a public key to the PKG, which is used to return a private key to the corresponding user; 3, two rounds of key agreement: a first round of key agreement is carried out in order to authenticate validity of neighbors of a group users and transmit an own temporary key, and a second round of key agreement is carried out after the successful authentication of the neighbors in order to disclose the related information used for generating the group conversation key; 4, the conversation key is calculated by using the information of the last step, and is used for the encryption and the decryption of the inter-group communication. Compared with the prior art, the method provided by the invention is advantageous in that the user dynamic event is supported at the same time of realizing the key agreements, and then the network is provided with the good dynamic performance and the expansibility, and at the same time, the internal attacker can be detected, and under the precondition of guaranteeing the safety performance, the encrypted items are less, and then the calculation quantity and the communication traffic are reduced.

Description

technical field [0001] The invention relates to a key negotiation method in a group communication network, belonging to the technical field of network communication security. Background technique [0002] The basic concept of the group key agreement protocol is: all members in the group will transmit messages in an open and untrusted network environment, and then jointly negotiate a same communication session key for subsequent secure session communication. A session key can be generated by a member of a group, but in more cases the session key is generated by the contributions of all members of the group. The session key calculated through negotiation can be used for message encryption and message digest generation to achieve subsequent security goals. [0003] Nowadays, more and more Internet applications have adopted the group communication technology, such as network video conferencing, group instant chat and online games. Establishing a safe and efficient distributed ...

AI Technical Summary

Problems solved by technology

However, these two protocols cannot resist impersonation attacks, as long as two malicious users can pretend to be the target user for key negotiation

Zheng et al. (Zheng S, Wang S, Zhang G. Adynamic, secure, and efficient group key agreement protocol [J]. Frontiers of Electrical & Electronic Engineering in China, 2007, 2(2): 182-185.) proposed two rounds Authenticable group key agreement protocol, which can be based on the Elgamal signature algorithm, which can prevent replay attacks and meet forward security, but the amount of messages sent during broadcasting is too large, which may cause high network load

To sum up, the existing ID-PKC-based schemes either have low communication efficiency, insufficient security, or cannot guarantee forward and backward security at the same time and cannot meet the requirements of practical applications.

Images