摘要： 提出了一种基于逻辑密钥分层机制(LKH)的密钥管理改进方案。该方案中密钥树采用节点坐标标记方法，便于密钥树的更新。组管理器只需要根据成员ID值计算成员所在路径上各节点密钥值，维护自己的私钥。对其安全性、组管理器计算量、密钥分发量等性能的分析表明，与传统的逻辑层次树密钥管理方案和其他改进方案相比，该方案减少了组管理器的密钥存储量和更新时的计算量与通信量，适合于大规模动态组播的应用，

关键词: 逻辑密钥分层机制, 密钥树, 节点坐标, 单向散列函数

Abstract: An improved dynamic group key management scheme for multicast based on LKH tree is proposed. The node coordinates are used to mark key tree in this scheme, which facilitates rekeying. Group manager computes the keys on path of the user node location according to the user ID and it just needs to maintain its private key. This scheme is suitable for the large-scale group. The security, group manager computation amount, key distribution amount and others performances of the scheme are analyzed. Compared with the traditional LKH scheme and other improved schemes, it reduces the number of keys for key management and the computation and communication amount when re-keying, which is suitable for large-scale group.

Key words: logic key hierarchy (LKH), key tree, node coordinates, one-way Hash function

中图分类号: 

• TP393