Chinese Journal of Computers   Full Text
Title	The Key Management Mechanism of IBE System
Authors	HU Liang CHU Jian-Feng LIN Hai-Qun YUAN Wei ZHAO Kuo
Address	(College of Computer Science and Technology, Jilin University, Changchun 130012)
Year	2009
Issue	No.3(543—551)
Abstract &   Background	Abstract There still exist several problems in the prototype of IBE proposed by Boneh and Franklin, such as how to distribute private keys safely, the lack of a secure timing key replaced management mechanism and how to ensure message security of privacy, integrity and non-forgeability. Upon these above, a new scheme of the improved key management mechanism of IBE has been put forward, which is named as the trustworthy key management mechanism of IBE system. And it can change users’ private keys regularly in this domain, which are subsequently distributed safely. Meanwhile it can also guarantee message security of privacy, integrity and non-forgeability by security service, which mainly includes Double Digital Signature, Digital Envelope and Digital Time-stamping. Finally, the proposed network protocols are proved to be secure by RO(Random Oracle) model. Keywords IBE; key management mechanism; double digital signature; provable security; keys distribution; keys timing replacement Background This research is supported by the National Natural Science Foundation of China under grant Nos.60873235, 60473099 and Program for New Century Excellent Talents in University of China under grant No.NCET-06-0300 and the Key project No.20080318 of Jilin province. An important objective of the projects is to probe the trend of network security, which can satisfy the need of constructing high-speed, large-scale and multi-services networks. Various complex attacks can not be dealt with by simple defense. And to add mechanisms to network architecture results in decreasing performance. In a word, fundamental re-examination of how to build trustworthy distributed network should be made. To satisfy the need of the next generation internet architecture above, this paper puts forward the trustworthy key management mechanism of IBE system, which can solve several problems of the current IBE, such as keys’ distribution, keys’ timing replacement and message’s secure service. And these improvements make IBE more practical especially for e-government and e-military affairs. Furthermore, the proposed network protocols in this paper are proved to be secure by RO(Random Oracle) model. Therefore this trustworthy key management mechanism of IBE system is based on secure network protocols. In addition the authors have published several papers in international journals and conferences on block cipher and identity-based cryptography.