Research Of Ad Hoc Network Distributed Key Management

Ad Hoc network is an infrastructureless and distributed network in which all the nodes have the function of host and router.Ad Hoc network has dynamic topology and is susceptible to security attacks ranging from passive eavesdropping to active interfering and denial-of-service attacking comparing with the wired network.If traditional centralized CA is applied in Ad Hoc network,this CA would become main target of adversaries. At present the distributed key management scheme and fully self-organized key management scheme can solve this problem to some extent,although these two schemes have their own flaws.In the distributed key management scheme, too many nodes have to transmit accusation information in the process of certificate revocation that causes big overhead.In the fully self-organized key management scheme,it is a long time for the system to initialize before the system really works.In this thesis we propose a new certificate revocation scheme to deal with the big overhead of communication in the process of certificate revocation in the distributed network.In our scheme we limit the scope of accusation information to reduce the overhead.At the same time we can also ensure the security of the network.As to the fully self-organized key management,all the current simulating examples are based on the PGP scheme.We simulate the real initial process of generating local certificate repository.After the initialization we randomly select nodes to calculate the success ratio of authentication at different sample time.We can get different ratios in different scenes by changing system parameters such as number of nodes, average speed of nodes and the scope of mobile nodes.After analyzing the data we can acquire which parameters have important impact on the success ratio of authentication.