Abstract: Aiming at the problems of key management in publish/subscribe system, this paper presents a key management method independent of subscriber group. An encryption key with an event and an authorization key with a subscription filter are combined in the method, and hierarchical key derivation algorithm is used to map the authorization keys and the encryption keys into a common key space in order to make the cost independent of the number of subscribers. Experimental results show that the cost is less and the scalability is better than traditional solution.

Key words: publish/subscribe, key derivation algorithm, key management, Pseudo-random function

摘要： 针对发布/订阅系统中的密钥管理问题，提出一种独立于订阅者分组的密钥管理方法。该方法通过加密密钥与事件、认证密钥和订阅消息过滤器相结合，采用分层的密钥衍生算法将加密密钥和认证密钥映射到公共密钥空间中，使密钥管理的花费独立于订阅者数量。实验结果表明，该方法相对于传统方法开销更小、可扩展性更强。

关键词: 发布/订阅, 密钥衍生算法, 密钥管理, 伪随机函数

CLC Number: 

• TP393