移动ad hoc网络预分配非对称密钥管理方案

doi:1000-436X(2012)10-0026-09

Abstract

Abstract:

In order to reduce communication overhead of the asymmetric key management in mobile ad hoc networks,an identity-based pre-distribution asymmetric key management scheme(PAKMS)was presented based on combined public key(CPK)framework,ElGamal public key cryptosystem and key pre-distribution mode.This scheme essentially reduced communication overhead of the asymmetric key management in mobile ad hoc networks by the private key generation (PKG)distributing a subset of master key for every node beforehand and a time-based key update approach.The method that PKG pre-distributed a subset of master key also made the nodes obtain their keys and key update services,which did not need to rely on online PKG.Thus,the inherent key escrow problem existing in identity-based asymmetric key management was avoided to some degree.Compared with typical schemes,this scheme needed much less communication overhead to accomplish node key update service.Furthermore,security proof of the scheme was described in detail.

Key words: mobile ad hoc network, security, pre-distribution, identity-based key management, communication overhead

Lei HAN,Ji-qiang LIU,Zhen HAN,Xue-ye WEI. Pre-distribution asymmetric key management scheme for mobile ad hoc networks[J]. Journal on Communications, 2012, 33(10): 26-34.

Figures/Tables 4

References 17

[1]	易平, 蒋嶷川, 张世永 . 移动ad hoc网络安全综述[J]. 电子学报, 2005,33(5): 893-899. YI P , JIANG N C , ZHANG S Y . A survey of security for mobile ad hoc networks[J]. Acta Electronica Sinica, 2005,33(5): 893-899.
[2]	华平, 胡光明, 董攀 . 大规模移动自组网络安全技术综述[J]. 计算机研究与发展, 2007,44(4): 545-552. HUA P , HU G M , DONG P . Survey of security technology for large scal manet[J]. Journal of Computer Research and Development, 2007,44(4): 545-552.
[3]	SHAMIR A . Identity-based cryptosystems and signature schemes[A]. Proceedings of the Advances in Cryptology-CRYPTO’84[C]. Berlin: Springer, 1984. 47-53.
[4]	BONEH D , FRANKLIN M . Identity-based encryption from the weil pairing[J]. SIAM Journal of Computing, 2000,32(3): 586-615.
[5]	KHALILI A , KATZ J , ARBAUGH W A . Toward secure key distribution in truly ad hoc networks[A]. International Symposium on Applications and the Internet[C]. Orlando,USA, 2003. 342-346.
[6]	DENG H , AGRAWAL D . TIDS:threshold and identity-based security scheme for wireless ad hoc networks[J]. Ad Hoc Networks, 2004,2(3): 291-307.
[7]	SILVA E , SANTOS A L , ALBINI L C P . Identity-based key management in mobile ad hoc networks:techniques and applications[J]. IEEE Wireless Communications, 2008,15(5): 46-52.
[8]	CHIEN H Y , LIN R Y . Improved ID-based security framework for ad hoc network[J]. Ad Hoc Networks, 2008,6(1): 47-60.
[9]	SUN J Y , ZHANG C , ZHANG Y C . An identity-based security system for user privacy in vehicular ad hoc networks[J]. IEEE Transactions on Parallel and Distributed Systems, 2010,21(9): 1227-1239.
[10]	南湘浩 . CPK密码体制与网际安全[M]. 北京: 北京国防工业出版社, 2008. NAN X H . CPK-Crypotosystem and Cyber Security[M]. Beijing: National Defence Industry Press, 2008.
[11]	ESCHENAUER L , GLIGOR V D . A key-management scheme for distributed sensor networks[A]. Proceedings of the 9th ACM Conference on Computer and Communication Security[C]. Chicago,USA, 2002. 41-47.
[12]	RAMKUMAR M , MEMON N . An efficient key predistribution scheme for ad hoc network security[J]. IEEE Journal on Selected Areas in Communications, 2005,23(3): 611-621.
[13]	胡亮, 刘哲理, 孙涛 . 基于身份的密码学的安全性研究综述[J]. 计算机研究与发展, 2009,46(9): 1537-1548. HU L , LIU Z L , SUN T . Survey of security on identity-based cryptography[J]. Journal of Computer Research and Development, 2009,46(9): 1537-1548.
[14]	ELGAMAL T . A public key cryptosystem and a signature scheme based on discrete logarithms[J]. IEEE Transactions on Information Theory, 1985,31(4): 469-472.
[15]	The NS manual (formerly ns notes and documentation)[EB/OL]. , 2011.
[16]	HAN L , LIU J Q , ZHANG D W . A portable TPM scheme for generalpurpose trusted computing based on EFI[A]. MINES'09:International Conference on Multimedia Information Networking and Security[C]. Wuhan,China, 2009. 140-143.
[17]	HAN L , LIU J Q , HAN Z . Design and implementation of a portable TPM scheme for general-purpose trusted computing based on EFI[J]. Frontiers of Computer Science in China, 2011,5(2): 169-180.

Metrics

Recommended 0

No Suggested Reading articles found!

密钥管理方案	密钥更新		通信量	时间同步
密钥管理方案	预分配密钥	节点密钥	通信量	时间同步
PAKMS	固定	更新	N/A	是
TIDS	N/A	更新	2×tN	否
Khalili	N/A	更新	2×tN	否

密钥管理方案	类型	理论基础	时间同步	密钥更新及撤销	通信量	存储需求
Khalili^[5]	基于身份＆门限	基于身份密码学＆门限密码学	否	有	大	大
TIDS^[6]	基于身份＆门限	基于身份密码学＆门限密码学	否	有	大	大
E-G^[12]	预分配	对称密码体制＆概率论	否	无	N/A	大
HARPS^[13]	预分配	对称密码体制＆概率论	否	无	N/A	大
PAKMS	基于身份＆预分配	基于身份密码学＆ElGamal加密方案	是	有	小	小

Pre-distribution asymmetric key management scheme for mobile ad hoc networks

RichHTML

PDF

Knowledge

Cited

Abstract

Cite this article

share this article

Figures/Tables 4

References 17

Related Articles 15

Metrics

Recommended 0

[1]	Shiqi ZHAO, Xiaohong HUANG, Zhigang ZHONG. Research and implementation of reputation-based inter-domain routing selection mechanism [J]. Journal on Communications, 2023, 44(6): 47-56.
[2]	Yuancheng LI, Yongtai QIN. Deep reinforcement learning based algorithm for real-time QoS optimization of software-defined security middle platform [J]. Journal on Communications, 2023, 44(5): 181-192.
[3]	Yingze LIU, Yuanbo GUO, Chen FANG, Yongfei LI, Qingli CHEN. Intelligent planning method for cyber defense strategies based on bounded rationality [J]. Journal on Communications, 2023, 44(5): 52-63.
[4]	Renchao XIE, Wen WEN, Qinqin TANG, Yunlong LIU, Gaochang XIE, Tao HUANG. Survey on rail transit mobile edge computing network security [J]. Journal on Communications, 2023, 44(4): 201-215.
[5]	Zhiyong LUO, Yu ZHANG, Qing WANG, Weiwei SONG. Study of SDN intrusion intent identification algorithm based on Bayesian attack graph [J]. Journal on Communications, 2023, 44(4): 216-225.
[6]	Ming XU, Baojun ZHANG, Yiming WU, Chenduo YING, Ning ZHENG. Cyber attacks and privacy protection distributed consensus algorithm for multi-agent systems [J]. Journal on Communications, 2023, 44(3): 117-127.
[7]	Haiyan KANG, Molan LONG. Research on network attack analysis method based on attack graph of absorbing Markov chain [J]. Journal on Communications, 2023, 44(2): 122-135.
[8]	Caixia LIU, Xinsheng JI, Jiangxing WU. Endogenous security common problems and solutions of the mobile communication networks [J]. Journal on Communications, 2022, 43(9): 70-79.
[9]	Runhua SHI, Hui YU, Weiyang KE, Xiaotong XU. Quantum anonymous one-vote veto protocol based on BB84 states [J]. Journal on Communications, 2022, 43(8): 109-120.
[10]	Weiyu CHEN, Junshan LUO, Fanggang WANG, Haiyang DING, Shilian WANG, Guojiang XIA. Survey of capacity limits and implementation techniques in wireless covert communication [J]. Journal on Communications, 2022, 43(8): 203-218.
[11]	Yuanbo GUO, Yongfei LI, Qingli CHEN, Chen FANG, Yangyang HU. Fusion of Focal Loss’s cyber threat intelligence entity extraction [J]. Journal on Communications, 2022, 43(7): 85-92.
[12]	Hongbin LUO, Shan ZHANG, Zhiyuan WANG. Architecture and mechanisms for secure and efficient internetworking of heterogeneous network [J]. Journal on Communications, 2022, 43(4): 36-49.
[13]	Huanhuan LIAN, Huiying HOU, Yunlei ZHAO. Post-quantum verifier-based three-party password authenticated key exchange protocol [J]. Journal on Communications, 2022, 43(4): 95-106.
[14]	Yu ZHANG, Xiongwen ZHAO, Xiaoqing WANG, Suiyan GENG, Peng QIN, Zhenyu ZHOU. Robust resource allocation algorithm for multicarrier NOMA security communication system [J]. Journal on Communications, 2022, 43(3): 42-52.
[15]	Hongyu YANG, Haihang YUAN, Liang ZHANG. Host security assessment method based on attack graph [J]. Journal on Communications, 2022, 43(2): 89-99.