安全协同计算中群密钥的同态提取与通用构造

项目名称： 安全协同计算中群密钥的同态提取与通用构造

项目编号： No.61202388

项目类型： 青年科学基金项目

立项/批准年度： 2013

项目学科： 计算机科学学科

项目作者： 吕锡香

作者单位： 西安电子科技大学

项目金额： 25万元

中文摘要： 扩展DH协议这一传统研究方法难以获得新型协同计算安全所必需的一轮自组织群密钥协商协议，本项目基于密钥同态性密码算法和秘密分割理论，研究安全协同计算中一轮自组织群密钥协商协议的新型设计理论和通用构造。具体包括：利用密钥同态性新型格公钥加密和密钥同态性无证书签名，求解公钥合并与群密钥提取关键科学问题，进而构造出一轮自组织群密钥协商协议，并提出基于密钥同态性密码算法构造一轮自组织群密钥协商协议的一般方法；研究一轮群密钥协商协议的无证书认证性，通过签密Tag-KEM和密钥同态性签密分别构造递推密钥链和群密钥封装算法，设计出抗公钥替换攻击安全的且具有内外部不可伪造性的一轮自组织群密钥协商协议；研究一轮自组织群密钥协商协议对动态群事件的适应性，降低动态群密钥更新对群成员的影响。该项研究注重理论原创性与应用实效性，研究成果将为新型分布式协同计算中的安全群通信和安全信道预先建立提供基础设计理论和方法参考。

中文关键词： 分布式协同计算；安全群通信；群密钥同态提取；签密群密钥封装；无证书认证性

英文摘要： By extending the well-known DH key agreement protocol, it is difficult to address the essential concerns, one-round and self-organized group key agreement (GKA), for secure group communications in the latest collaborative applications. Typical examples of this type applications are cloud computing and MANETs. In this project, with key-homomorphic encryption\signcryption theories and new fast public-key cryptosystems, we concentrate on the new design theory and the general construction of one-round self-organized GKA protocols for the latest distributed collaborative computing. Our major research contents are as follows: Firstly, we use the key-homomorphism of some fast lattice public-key encryption algorithms and some certificateless signature algorithms to construct the combined algorithms of group encryption public keys and the extract algorithms of members' decryption keys. And then we will achieve a one-round self-organized GKA protocol and its general constructions based on key-homomorphic cryptosystems. Secondly, we further focus on the certificateless authenticity of one-round self-organized GKA protocols by constructing recursive key-chains and group key encapsulation algorithms respectively based on signcryption Tag-KEM and key-homomorphic signcryption. We also prove that the proposed one-round GKA pr

英文关键词： Distributed collaborative computing；Secure group communication；Homomorphic extraction for group key；Signcryption group tag-KEM；Certificateless authentication