分布式网络环境下基于区块链的密钥管理方案

doi:10.11959/j.issn.2096-109x.2018077

Abstract

Abstract:

Regarding the difficult key management and excessive communication overhead in the distributed group networks,KMSBoB-Key management schemes based on blockchain was proposed,featuring key management and transmitting procedure based on blockchain in distributed group networks.Meanwhile,the all-member mining process of blockchain and the MTI/CO protocol process were combined to establish a protocol of dynamically generated session key,so as to streamline key management strategies in cross-heterogeneous autonomous domains.According to simulation testing and result analysis,KMSBoB is safe and effective,with less communication overhead and higher expansibility than traditional key management schemes.

Key words: Blockchain, key management, distributed networks

CLC Number:

TP399

Qianyi DAI,Kaiyong XU,Song GUO,Guoming CAI,Zhicheng ZHOU. Blockchain-based key management scheme for distributed networks[J]. Chinese Journal of Network and Information Security, 2018, 4(9): 23-35.

Figures/Tables 14

References 13

[1]	SUN Y , TRAPPE W , LIU K J R . A sKMClablemultiKMCst key management scheme for heterogeneous wireless networks[M]. IEEE Press, 2004.
[2]	ZHOU W , XU Y , WANG G . Decentralized group key management for hierarchiKMCl access control using multilinear forms[J]. Concurrency ＆ Computation Practice＆Experience, 2016,28(3): 631-645.
[3]	张志军, 郭渊博, 刘伟 ,等. 基于m叉树与DH协议的组密钥协商协议[J]. 计算机工程, 2010,36(1): 161-163.
	ZHANG Z J , GUO Y B , LI W ,et al. Group key agreement protocol based on m-tree and DH protocol[J]. Computer Engineering, 2010,36(1): 161-163.
[4]	YU S C , REN K , LOU W J . Attribute-based on-demand multicast group setup with membership anonymity[J]. Computer Networks, 2010,54(3): 377-386.
[5]	HE D , CHEN C , CHAN S ,et al. Secure and efficient handover authentication based on bilinear pairing functions[J]. IEEE Transactions on Wireless Communications, 2012,11(1): 48-53.
[6]	HE D,CHANS , GUIZANI M . Handover authentication for mobile networks:security and efficiency aspects[J]. IEEE Network, 2015,29(3): 96-103.
[7]	NAKAMOTO S . Bitcoin:A peer-to-peer electronic cash system[J]. Consulted, 2008
[8]	荆继武, 林璟锵, 冯登国 . PKI 技术[M]. 北京: 科学出版社, 2008:6.
	JING J W , LIN J Q , FENG D G . PKI technology[M]. Beijing: Science PressPress, 2008:6.
[9]	Bitcoin blockchain size[EB/OL]. .
[10]	MERKLE R , . C,A digital signature based on a conventional en-cryption function[C]// Advances in CryptologyCRYPTO87. Springer, 1987 369-378.
[11]	AITZHAN N.Z , SVETINOVIC D . ,Security and privacy in de-centralized energy trading through multi-signatures,blockchain and anonymous messaging streams[J]. IEEE Transactions on De-pendable and Secure Computing, 2016,99: 1-1.
[12]	VARGA et al , . The Omnet++ discrete event simulation system[C]// Proceedings of the European simulation multiconference (ESM2001), 2001.
[13]	SOMMER C , GERMAN R , DRESSLER F . Bidirectionally coupled network and road traffic simulation for improved ivc analysis[J]. Mobile Computing,IEEE Transactions on, 2011,10(1): 3-15.

Metrics

Recommended 0

No Suggested Reading articles found!

符号	说明
SMN-A	安全管理节点A
Src	源节点
Dest	目的节点
Address	安全管理节点A网络地址编号
ID	网络节点身份标识，本文模型为URL标识
Cert	数字证书，本文默认证书格式为X.509格式^[8]
pk_SMN-A	安全管理节点A的公钥，公钥对全体SMN成员公开
sk_SMN-A	安全管理节点A的私钥，本文默认私钥是安全的
enc(M)_pk→C	加密算法，使用公钥pk加密明文M可得到密文C
dec(C)_sk→M	解密算法，使用私钥sk解密密文C可得到明文M
sig(M)_sk→C	签名算法，使用私钥sk对明文M签名可得到签名C
ver(C)_pk→M	验签算法，使用公钥pk对签名C验签可得到明文M
hash()	杂凑算法，本文指SHA1算法
doublehash()	doublehash()=SHA256(SHA256())
Rand()	随机数生成算法
randPerm()	随机排序算法，对特定序列进行排序
g	双线性对生成元
G	乘法循环群
BlockHead	区块头
BlockBody	区块体
Block	区块，包含BlockHead和BlockBody

内容	说明
Hashed result of the transaction	交易内容杂凑值
Position of this transaction in block	区块交易位置
Current security domain number SMN-this	本安全域网络编号
Beacon	网络信标，标明是否进行跨AD密钥传输
Identity materials	身份相关信息，包括ID_SMN-A和Cert_SMN-A
Signature of this transaction	交易签名值Sig{Cipher+Dest_SMN}_skSMN-Src
Payload:{Encrypted Transaction Information}	Cipher=Enc{info}_pkSMN-Dest

区块内容	隶属区块部分	说明	字符长度/bit
ID	区块头	用户标识符ID，为公钥的Base58匿名值	8
Hash _prev	区块头	前一区块头杂凑值	32
Timestamp _now	区块头	时间戳，基于用户系统生成	4
BLC_Version	区块头	区块链版本号，本文为1.0	4
Root_Merkle	区块头	交易内容的Merkle Root值	32
BLC_Height	区块头	区块高度	4
Hash_Target	区块头	目标难度值	8
Nonce	区块头	工作量证明机制调整随机数值	8
BLC_Payload	区块体	区块体负载	—
Transaction _No1	BLC_Payload	交易项Tx_No1	—
Transaction _No2	BLC_Payload	交易项Tx_No2	—
#	#	#	#
Transaction _{No n}	BLC_Payload	交易项Tx_{No n}	—
Data_Payload	Transaction	交易项中包含相关数据负载，通常为密钥分量	—

密码学运算项目	平均处理时间/milliseconds
Enc()	0.489
Dec()	0.832
Sig()	0.495
Ver()	1.276
区块挖矿	5.331

[1]	Zhao CAI, Tao JING, Shuang REN. Survey on Ethereum phishing detection technology [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 21-32.
[2]	Heli WANG, Qiao YAN. Selfish mining detection scheme based on the characters of transactions [J]. Chinese Journal of Network and Information Security, 2023, 9(2): 104-114.
[3]	Beiyuan YU, Shanyao REN, Jianwei LIU. Overview of blockchain assets theft attacks and defense technology [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 1-17.
[4]	Wei JIN, Fenghua LI, Ziyan ZHOU, Xiyang SUN, Yunchuan GUO. Cache of cryptographic key based on query popularity [J]. Chinese Journal of Network and Information Security, 2023, 9(1): 83-91.
[5]	Fei TANG, Ning GAN, Xianggui YANG, Jinyang WANG. Anti malicious KGC certificateless signature scheme based on blockchain and domestic cryptographic SM9 [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 9-19.
[6]	Jun LIU, Lin YUAN, Zhishang FENG. Survey of key management schemes for cluster networks [J]. Chinese Journal of Network and Information Security, 2022, 8(6): 52-69.
[7]	Dan LIN, Kaixin LIN, Jiajing WU, Zibin ZHENG. Bytecode-based approach for Ethereum smart contract classification [J]. Chinese Journal of Network and Information Security, 2022, 8(5): 111-120.
[8]	Liquan CHEN, Xiao LI, Zheyi YANG, Sijie QIAN. Blockchain-based high transparent PKI authentication protocol [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 1-11.
[9]	Wenbo ZHANG, Simin CHEN, Lifei WEI, Wei SONG, Dongmei HUANG. State-of-the-art survey of smart contract verification based on formal methods [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 12-28.
[10]	Feng LIU, Jie YANG, Jiayin QI. Survey on blockchain privacy protection techniques in cryptography [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 29-44.
[11]	Xiaoling SONG, Yong LIU, Jingnan DONG, Yongfei HUANG. Application and prospect of blockchain in Metaverse [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 45-65.
[12]	Lin JIN, Youliang TIAN. Multi-authority attribute hidden for electronic medical record sharing scheme based on blockchain [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 66-76.
[13]	Pengkun JIANG, Wenyin ZHANG, Jiuru WANG, Shanyun HUANG, Wanshui SONG. Blockchain covert communication scheme based on the cover of normal transactions [J]. Chinese Journal of Network and Information Security, 2022, 8(4): 77-86.
[14]	Jianlin NIU, Zhiyu REN, Xuehui DU. Cross-domain authentication scheme based on consortium blockchain [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 123-133.
[15]	Baoqin ZHAI, Jian WANG, Lei HAN, Jiqiang LIU, Jiahao HE, Tianhao LIU. Hierarchical proxy consensus optimization for IoV based on blockchain and trust value [J]. Chinese Journal of Network and Information Security, 2022, 8(3): 142-153.

Blockchain-based key management scheme for distributed networks

RichHTML

PDF下载

Knowledge

Abstract

Cite this article

share this article

Figures/Tables 14

References 13

Related Articles 15

Metrics

Recommended 0