摘要
针对现有密钥托管体制中多密钥托管问题,基于ECC密码体制和Shamir门限方案的安全性,提出了一种基于动态多重密钥共享协议的门限密钥托管方案。该方案中多密钥分发者可以根据密钥托管者的权重值以及托管密钥的重要性,动态调整托管密钥的门限值,托管代理只需维护一份密钥份额,即可实现多重密钥的托管。方案的通信均在公共信道上完成,避免了维持秘密通道的额外开销。对方案进行了评价,结果表明方案具备良好的前向保密性、安全性与有效性。
Aiming at the multi-key escrow problem in the existing escrow system,a threshold key escrow scheme based on the dynamic multi-key sharing protocol is proposed,which is based on the security of the ECC cryptography system and the Shamir threshold scheme. According to the weight of the key escrow and the importance of the key,the multi-key distributor can adjust the threshold dynamically in the scheme,each escrow agent needs to maintain a key share to realize the escrow of multi-key. The communications of the scheme is carrying on in a public channel,whereas non-requirement of a secret channel,so that it can avoid the extra cost of computation to maintain this secret channel.Finally the evaluation and research are presented,it shows that the proposed scheme is secure and effective,and can offer a good forward secrecy.
出处
《江南大学学报(自然科学版)》
CAS
2015年第5期556-561,共6页
Joural of Jiangnan University (Natural Science Edition)
基金
江苏省产学研联合创新项目(BY2013015-23)
中央高校科研专项项目(JUSRP211A 41)