【摘要】 提出了一种基于 Diffie- Hellman密钥交换和虚拟密钥树的对等组内安全通信密钥协商协议。每个成员只记录维护其密钥路径及密钥路径上结点的密钥、隐蔽密钥和协同隐蔽密钥 ,通过计算得出组通信密钥。成员加入对等组时 ,通过认证并取得确认信息 PS,其它成员根据 PS来更新其密钥树和组通信密钥 ;成员离开对等组时 ,由具有相对于离开成员父结点最左路径的成员发起密钥树的更新过程。由最后的理论分析和实际应用可以看出 ,该协议具有良好的安全性更多还原

【Abstract】 We present a new protocol addressing collaborative group key agreement for secure group communication in peer group based on Diffie Hellman key exchange and notation for nodes of a key tree. Each member in the group needs to record and maintain its key path and a series of keys, blinded keys and collaborative blinded keys which belong to the nodes in its key path, and recomputes the group key by these information when a node has been added to the key tree or removed from the key tree. In our protocol, each member only needs the information of h nodes of the key tree, while in the existing protocols each member needs 2 h -1 nodes. When a new member M j wants to join the group, it is authenticated by M i and certificated by M t , and gets certificated information P S(M i and M t are already in the group). M i broadcasts the message toting P S about M j joining the group to all members in the group, and all members update their key path, blinded key, collaborative blinded key and group key respectively. When M i wants to leave the group, M l launches the process for updating the key tree. Then all members except M i repeat the updating process. M l owns the most left key path relative to M i s parent node. Finally, analysis and practical tests show that this protocol can meet the requirements of secure communication for a dynamic peer group——group key secrecy, forward secrecy and backward secrecy.更多还原