基于角色的多密门限体制

Shamir门限体制可以用来解决多个人共享一个密钥的问题。但是,如果有多个密钥需要让一组成员的部分或者全部成员共享,如果还用Shamir门限体制来解决,就会导致每一个共享方案都需要一个门限体制,也就是说每个成员必须保存一个或多个身份密钥,这显然是不方便也是不安全的。我们利用基于角色的访问控制(RBAC)的思想,提出了一种新的多密门限体制方案,其显著的优点就是在保证安全性的前提下,每一个参与者须且仅需拥有一个身份密钥。因此,该方案不仅具有RBAC的所有优点,而且对于共享者来说也非常方便。

Role-Based Multisecret Threshold Schemes

A multisecret threshold scheme is a system that protects more than one secret among a group of participants in such a way that they can only be reconstructed from the joint information held by some predetermined number of these participants. The basic concept of role-based access control (RBAC), which has been around since the advent of multi-use computing is described. Based on the idea of "role", a multisecret threshold scheme in which every participant needs possessing only one identity key, is presented. Therefore, the scheme not only has all the advantages of RBAC, but also is very convenient for the participants.