论文部分内容阅读
针对现有无证书群组密钥协商协议无法在敌手具有替换用户公钥或获知私钥生成中心(key generation center,KGC)主秘密密钥2类攻击能力下满足安全性,该文提出一种显式认证的无证书群组密钥协商协议。该协议通过在第二轮中添加签名消息、签名与群组用户身份集合、第一轮所有广播消息、第二轮用户发送的消息,保证了消息的新鲜性和身份的认证;对协议第二轮消息进行改进,使得敌手无法利用邻居节点进行攻击。分析结果表明:与其他无证书群组密钥协商协议相比,本协议可抗具有2类攻击能力的敌手,且计算量更小。
In order to solve the problem that the existing certificateless group key agreement protocol can not meet the security requirements of adversary with replacement user public key or knowledge of KGC master secret key type 2 attack ability, Explicitly certified certificateless group key agreement protocol. The protocol guarantees the freshness and identity of the message by adding signature information, signature and group user identity set in the second round, all broadcast messages in the first round and messages sent by the second round of users; Rounds of improvements to the message, making the enemy can not use the neighbor node to attack. The analysis results show that compared with other certificateless group key agreement protocols, this protocol can resist rivals with two kinds of attack ability, and the computation is less.