局部完全自组的MANET密钥管理

当网络规模增大时，自组织密钥管理中建立证书链的开销都会急剧增大。为了解决方案的扩展性问题，提出建立一种局部完全自组的密钥管理框架。在该框架中将网络划分为多个域，域内采用局部完全自组织的构架方式，并以门限秘密共享机制和RSA非对称加密体制为基础．为各个域建立虚拟CA。不同域的两个节点可以通过虚拟CA建立域间信任关系。通过多域的划分提高了密钥管理框架的可扩展性．同时降低了远距离节点之间认证的通信开销。

Localized Self-organized Key Management for MANET

As the increasing of the network size, the cost of setting up the certificate link in the serf-organized key management is quickly enhanced. In order to solve the expansibility problem in the original scheme, a localized self-organized key management is presentod. In this frame, the network is divided into many domains. In the domain it uses the self-organized scheme, and it sets up virtual CA for each domain based on the secret sharing principle and RSA cryptosystem. Nodes from different domain can set up trust relationship by virtual CA. This scheme enhances the expansibility of the serf-organized scheme, and decreases the communication cost caused by authentication between long distance nodes.