摘要： 提出了基于离线证书签发的分布式MANET 公钥管理策略。通过离线签发的证书推荐节点加入MANET。事先构造公/私钥集，使节点更新后公钥的哈希值等于更新前的公钥。该策略解决了节点加入MANET 时最初的身份认证问题和加入MANET 后的公钥更新过程，减少了节点加入MANET 后的计算负担。

关键词: 移动自组网；证书签发中心；单向哈希函数；公钥管理

Abstract: This paper presents a distributed public key management scheme based on the off-line CS in MANET. Off-line issued certificates can help nodes join the MANET. Nodes create several pairs of public/private keys before joining the MANET and the hash value of the public key after update equals to the public key before update. The approach can authenticate the nodes’ identity when they first join the MANET. It solves the problem when nodes update their public keys, and also reduces the computational loads on mobile nodes in MANET.

Key words: Mobile Ad Hoc network(MANET); Certificate signer (CS); One-way hash function; Public key management