面向容侵的秘密共享系统的设计

针对Intemet服务器间安全连接所使用的会话密钥面临的威胁,利用秘密共享理论,结合Shamir有限域Zp中的多项式方程,提出面向容侵的(w,t)丁限设计方案.此方案是将会话密钥K分成W个子密钥,并秘密存储在不同的共享服务器中,若恢复会话密钥K,只需W个子密钥中的t个子密钥.而入侵者得到t个子密钥要比得到一个会话密钥更难,因此系统具有一定容侵功能,以保证会话密钥的安全.从结构、协议工作和特点等方面加以描述,并对安全性作了分析.初步建立了基于(w,t)秘密共享理论的网络容侵模型.

Design of Sharesecret System on Intrusion Tolerance

The (w, t) threshold scheme on intrusion tolerance, which relies on the polynomial equation in the Limited Domain of Shamir and the Share-secret Theory, has been presented in this thesis. The good of the scheme is to safeguard the session keys, which are used to bring the communication between servers to success. The scheme divides one session key such as K into several sub-keys and stores them into different servers secretly. We can restore the session key by several members of all sub-keys. The intrusion tolerance function of the scheme lies in the difficulty in getting some sub-keys through intruding upon several servers. This dissertation makes a mathematical analysis of the security of the scheme as well as works at describing the designed framework, working protocols and features of the scheme. So a model of network intrusion tolerance based on (w, t) threshold scheme has been put forward in this paper.