Research On Key Management Of Space Information Networks

Space Information Networks is the substaintial foundation for acquiring space information, and it is also the indispensable part of military information system. In hi-tech partial wars, the significance of space information becomes more and more prominent, and the security of Space Information Networks has been a worldwide focus. Based on analyzing the character of Space Information Networks and the threat it faces, the work of Space Information Networks key management research is undertaken in this dissertation. The main productions of this dissertation are summarized as follows:1. In order to resolve the difficulty of concentrating key management and over-consumption on certificate maintenance in Space Information Networks, an identity-based distributed key management scheme (ID-KMS) is proposed. In ID-KMS, it makes private-key update quite easy and increases the security and feasibility of main-key share update by employing satellite nodes to makeup the Distributed Private Key Generator.2. In order to resolve the problems of key escrow in ID-KMS, a certificate-less distributed key management scheme (CL-KMS) is proposed. CL-KMS is able to resist cahoots-attack by adopting certificate-less cryptography to generate private-key.3. On the basis of the scheme proposed above, a Space Information Networks group key management scheme based on dynamic servers (DS-GKMS) is designed. DS-GKMS sets up a dynamic muster of service-nodes using satellite nodes, so that the problem of imbalance consumption and single-point failure is avoided.4. By analyzing the threats' characteristic suffered by main-key of Space Information Networks in distributed management scheme, a formula for measuring security intensity of main-key is educed. By analyzing the relation between threshold value or update period of key-shares and main-key security intensity, a method of setting the two parameters reasonably is given.