在隨意網路下以相互合作之信任群體方式改進公開金鑰之確認性

Improving Public Key Authentication in ad-hoc networks with Cooperative Trust Groups

林信宏(Sin-Hong Lin)

指導教授 ： 賴飛羆

國立臺灣大學/電機資訊學院/資訊工程學研究所/碩士(2006年)

https://doi.org/10.6342/NTU.2006.00342

摘要

有別於一般的網際網路，無線隨意網路是一種缺少公共基礎建設可供安全認證的網路，並且它有動態拓樸位置以及需在有限的能源下運作等特性；因此，一般傳統的安全認證機制方法例如公共鑰匙基礎結構不能很順利的應用在無線隨意網路上。根據這個議題，我們提出了建立相互合作之信任群體方式改進公開金鑰在安全認證上的問題，為了避免在形成群體時可能造成太大的網路負擔，因此我們考慮以半徑為兩個節點的星狀拓樸產生相互合作之信任群體，此群體中的每位成員須做到保證彼此是高度互相信任的狀態，並且每位成員都將得到共享的群鑰配對用以簽發憑證。換句話說，藉由使用共享群鑰簽發憑證將可使得每位群體成員成為此群體的代理人，我們深信此觀念可用以改進一般只有點對點之間的無效率認證。

關鍵字

公共鑰匙基礎結構 ； 相互合作之信任群體 ； 安全認證 ； 點對點機制 ； 星狀拓樸 ； 群鑰配對 ； 個人鑰匙配對 ； 數位簽章

並列摘要

An ad hoc network is an “infrastructure-less” network which is much different from Internet networks. The main differences are the lacking of fixed infrastructures, the dynamic topology, and the limited transmission range of mobile hosts. Therefore, it is difficult for us to apply the traditional security solution, such as PKI, from the wired network to the mobile environment. According to the issue, we propose an approach to form cooperative trust groups to solve the authentications among mobile hosts in the ad hoc network. The procedure of forming groups should avoid causing too much overhead, so only a simple star topology with radius at most 2 is taken into consideration to deploy the cooperative trust groups. Each member in the same cooperative group has high trust for its group members and all of them simultaneously own a shared group key used for the authentication of digital signature. In other words, a group member may act as a substitute of one another by issuing the certificate signed with the shared group key. We are convinced that the concept can redeem the inefficient authentication only used with the personal public key.

並列關鍵字

PKI ； cooperative trust group ； security authentication ； peer-to-peer ； star topology ； group key pair ； personal key pair ； digital signature

參考文獻

[2] D. B. Johnson and D. A. Maltz. "The Dynamic Source Routing Protocol for Mobile Ad Hoc Networks (DSR)", 16-Apr-03, draft-ietf-manet-dsr-09.txt.

[4] A. Aresenault and S. Turner. “Internet X.509 public key infrastructure.” draft-ietf-pkix-roadmap-06.txt, 2000.

[5] R. Perlman. “An overview of PKI trust models.” IEEE network, Nov.-Dec. 1999.

[6] D. Zhu and M. Mutka. “Promoting Cooperation Among Strangers to Access Internet Services from an Ad Hoc Network.” IEEE Annual Conference on Pervasive Computing and Communication, 2004.

[7] S. Lee, R. Sherwood, and B. Bhattacharjee. “Cooperative Peer Groups in NICE.” IEEE Annual Joint Conference on Computer and Communications Societies, 2003.