一种适用于Ad hoc网络的轻量级密钥交换协议

通过对Ad hoc网络安全性特殊需求的分析,提出适合其特点的轻量级节点间密钥交换协议. 协议使用一种新的基于ID的身份认证机制相互验证身份;使用改进的Blom机制生成加密密钥和认证密钥,分别用于数据私密性保护和报文完整性检查. 为了防止敌方捕获密钥,提出基于节点间数据流的密钥更新机制. 针对节点撤销,给予相应的解决方案. 从不同的角度对协议进行安全性分析,通过和其他实现方法比较,在性能方面证明其高效性.

Lightweighted key exchange protocol in Ad hoc networks

Through the analyses of special security requirements in Ad hoc networks,a lightweighted key exchange protocol between two nodes is proposed in this paper.In order to validate its identity,a new authentication mechanism based on ID is used in this protocol.Two keys of which one is used for privacy and the other is used for integrality are genetrated by improved Blom mechanism.A key updating measure based on the data flow between nodes is used to prevent enemy capture keys.Aiming at nodes withdrawal,the authors propose the corresponding solution.From different angles,they analyze the security of protocol.By comparison of other methods,the high efficiency of this protocol is validated.