群組金鑰管理中高效率之金鑰包裝機制

Efficient Key Packaging Schemes for Group Key Management

康照群(Chao-Chun Kang)

指導教授 ： 雷欽隆

國立臺灣大學/電機資訊學院/資訊網路與多媒體研究所/碩士(2007年)

https://doi.org/10.6342/NTU.2007.00905

摘要

群組金鑰管理是安全的多重傳送訊息架構中不可或缺的要素，在2005年11月，林振群等學者提出了一個稱為「One-Way Key Derivation (OKD)」的有效率之機制，此機制利用了樹狀結構來管理金鑰，我們發現在此機制中，當有成員加入一個樹的高度為x的群組時，新成員必須解密O(x)次而求得群組金鑰，另一方面，當有成員離開群組時，其他成員必須解密O(x)次求得群組金鑰，對於運算能力較差的裝置而言，解密是高花費的運算，在此情況下，當有成員異動時，群組成員不能迅速得知新的群組金鑰，因此他們不能立即加密訊息接著傳送出去或是立即解密而得知收到的訊息，尤其是當傳送很緊急的訊息時，此機制對於群組成員是沒有效率的。
在此我們提出了針對OKD而改進的高效率之金鑰包裝機制，在新的機制中，新加入的成員只需一次的解密運算即可求得群組金鑰，另一方面，當有成員離開群組時，我們的機制把解密運算更換為更快速的雜湊運算；和OKD比起來，我們的機制使得群組成員可以更快速地得到新的群組金鑰。

關鍵字

群組金鑰管理 ； 安全群播 ； 安全群組溝通 ； 樹狀結構金鑰管理 ； 邏輯式階層金鑰管理 ； 雜湊函數

並列摘要

Group key management is an essential component of secure multicast architecture. An efficient group key management protocol called One-Way Key Derivation (OKD), proposed by Lin et al. in 2005, uses a tree to manage keys. We find that in OKD, when a member joins a group with key tree height x, the new member has to decrypt O(x) times to get the new group key. On the other hand, when a member leaves the group, other group members have to decrypt O(x) times to get the new group key. For devices with limited computational capabilities, decryption is a costly operation. In these situations, the group members cannot derive the new group key fast enough when membership changes. Therefore, they can neither encrypt and send messages nor decrypt to get the received messages immediately. It is inefficient for group members, especially when the message is very urgent.
In this paper, we propose an efficient key packaging scheme for group key management based on OKD. In our scheme, a new group member only needs one decryption to get the new group key. On the contrary, our scheme replaces decryption operations with faster hash operations when a member leaves the group, so it allows group members to derive the new group key more quickly than OKD.

並列關鍵字

group key management ； secure multicast ； secure group communication ； tree-based key management ； Logical Key Hierarchy (LKH) ； hash function

參考文獻

[1] A. Sherman and D. McGrew, “Key Establishment in Large Dynamic Groups using One-Way Function Trees,” IEEE Transactions on Software Engineering, Volume 29, No. 5, pp. 444—458, May 2003.

[2] C.-S. Park and D.-H. Lee, “Secure and Efficient Key Management for Dynamic Multicast Groups,” ACM SIGOPS Operating Systems Review, Volume 35, Issue 4, pp. 32—38, October 2001.

[3] C. Wong, M. Gouda, and S. Lam, “Secure Group Communications using Key Graphs,” ACM SIGCOMM '98, pp. 68—79, September 1998.

[4] D.-W. Kwak, S.-J. Lee, and J.-W. Kim, “An Efficient LKH Tree Balancing Algorithm for Group Key Management,” Communications Letters, IEEE, Volume 10, Issue 3, pp. 222—224, March 2006.

[6] F.-Y. Lee and S. Shieh, “Scalable and Lightweight Key Distribution for Secure Group Communications,” International Journal of Network Management, Volume 14, Issue 3, pp. 167—176, May 2004.