Abstract: In order to provide secure multicast, the traffic encryption key(group encryption key) must be updated when the membership changes. There existing problems such as the out-of-sync between encryption key and data, low efficiency while updating the encryption key individually. This paper proposes an update method for batch encryption keys based on the marking algorithm applied to key tree. Analysis and simulation results prove that this method can alleviate the mentioned problem and decrease the update cost of encryption key when the membership changes.

Key words: encryption key tree, individual update, batch update, marking algorithm

摘要： 当组成员关系发生变化时，必须更新通信密钥(组密钥)，以提供安全多播。独立更新密钥时，存在密钥和数据不同步以及低效等问题。提出一种基于密钥树标记算法的批量密钥更新方法。分析和仿真结果证明，该方法可以缓解上述问题，降低组成员关系改变时的密钥更新代价。

关键词: 密钥树, 独立更新, 批量更新, 标记算法

CLC Number: 

• TP393.08