上海大学学报(自然科学版)

• 计算机工程与科学 • 上一篇    下一篇

分布式安全存储中基于共享组的周期性密钥更新

钱权, 王天宏, 黄国锐, 张瑞   

  1. 1. 上海大学计算机工程与科学学院, 上海200444; 2. 解放军陆军军官学院, 合肥230031
  • 收稿日期:2012-11-20 出版日期:2013-02-28 发布日期:2013-02-28
  • 通讯作者: 钱权(1972—), 男, 副教授, 博士, 研究方向为计算机网络、网络安全和协议分析与验证. E-mail:qqian@shu.edu.cn
  • 作者简介:钱权(1972—), 男, 副教授, 博士, 研究方向为计算机网络、网络安全和协议分析与验证. E-mail: qqian@shu.edu.cn
  • 基金资助:

    国家自然科学基金资助项目(61003248); 国家教育部博士点基金资助项目(20093108120016); 上海市重点学科建设资助项目(J50103); 上海市教委创新基金资助项目(09YZ05); 上海市科委开放课题基金资助项目(09511501300)

Cyclic Key Update Scheme Based on Sharing Group for Distributed Secure Storage

QIAN Quan, WANG Tian-hong, HUANG Guo-rui, ZHANG Rui   

  1. 1. School of Computer Engineering and Science, Shanghai University, Shanghai 200444, China;
    2. Army Officer Acadedy of People’s Liberation Army, Hefei 230031, China
  • Received:2012-11-20 Online:2013-02-28 Published:2013-02-28

摘要: 分布式存储是解决海量数据存储的重要手段, 而多用户环境下密钥的分发和更新是分布式安全存储的重要问题. 传统方法大多采用密钥分发中心(key distribution enter, KDC)进行控制, 但随着用户数的增多, 密钥中心的工作量增大. 利用Chebyshev多项式的周期性特性和逻辑密钥树(logical key hierarchy, LKH)的层次密钥结构, 设计一种分布式文件存储中基于文件共享组的周期性密钥更新方案(cyclic key update scheme, CKUS). 该方案的特点是密钥的更新和传递无需借助公钥密码体制, 而直接通过文件所有者进行组播; 文件共享者采用本地计算, 提高了计算效率. 同时, 利用Chebyshev多项式的周期性特点, 使每个文件共享者自适应密钥更新, 有效降低密钥更新时的通信量, 减少用户节点的密钥存储量.

关键词: Chebyshev多项式, 逻辑密钥树, 分布式安全存储, 密钥更新

Abstract: Distributed storage is an efficient means for massive data storage. However, the key distribution and update are big challenges for such multi-user network environments. In traditional methods, key distribution and update are controlled by the key distribution center (KDC). The increases users inevitably increase the KDC’s workload. In this paper, a sharing group based cyclic key update scheme (CKUS) is proposed, which makes use of the cyclic characteristic of Chebyshev polynomials and the key management feature of logical key hierarchy (LKH). The special feature of CKUS is that key updating and transmitting do not resort to the public and private keys, but are only multicast by the file owner directly. Thus, file sharers only use local computations, thus increasing computational efficiency. At the same time, the scheme takes advantage of the Chebyshev polynomial’s cyclic characteristic, which make each file sharers update its key self-adaptively, reduce network traffic of key update effectively, and reduces the keys storage requirements of the user nodes.

Key words: chebyshev polynomial, logical key hierarchy (LKH), distributed secure storage, key update

中图分类号: