关键词: 组密钥分发协议, 会话密钥, 秘密共享, 内部人攻击

Abstract: Group key establishment protocol is used to establish a one-time session key among all participating entities, which ensures the message only recognizable for authorized member. Harn and Lin propose a group key transfer protocol based on Shamir’s secret sharing, which is then improved by Nam, et al. to resist the replay attack from inside adversary. In fact, both Harn and Nam are vulnerable against the insider attack unlike their claim. A modification of authenticated secure group key transfer protocol is proposed to achieve the insider attack-resistance and outsider attack-resistance.

Key words: group key transfer protocol, session key, secret sharing, insider attack