Abstract: The traditional group key management doesn’t account for the difficulties caused by the characteristics of wireless mobile network，so it can’t be applied directly.Based on the analysis of the limitations of the traditional group key management，this paper focuses on a new kind of group key management applicable to wireless mobile network，the self-healing group key management.However，it is limited by the number of rekeying and its centralized management model doesn’t meet the large-scale network’s needs very well.Hence，this paper introduces the asynchronous update strategy of nodes’ private key，the digital signature technology and distributed management framework to one representative of the self-healing group key management，expands the finite rekeying to infinite and enhances the ability to resist attacks，which is more applicable to the large-scale wireless mobile network.

Key words: group key management, self-healing, distributed management framework

摘要： 传统域密钥管理方案缺乏考虑无线移动网络自身特点给域密钥管理带来的困难，很难直接适用。在分析传统域密钥管理方案不足的基础上，研究具有自恢复能力的域密钥管理，但该类现行方案受更新次数的限制，不能满足大规模无线移动需求。为此，设计了私钥异步更新策略，引入分布式管理框架，对该类方案中具有代表性的北卡罗莱州立大学方案进行改进，使之能更好地适用于大规模无线移动网络。

关键词: 域密钥管理, 自恢复, 分布式管理框架