Abstract: In MANET，there exist lots of limitations in the aspect of security due to its properties，so higher demands about authentication have been presented.In this paper a certification service scheme in the cluster-based architecture is proposed according to authentication technique of threshold mechanism，and the problem that the number of one-hop neighbor nodes is less than threshold value is resolved.At the same time，the authors adopt Feldman’s VSS strategy to prevent malicious nodes from providing false partial certificates，and then to decrease unreliable wireless channel’s influence on CA.Meanwhile，the synthesis efficiency of certificates is increased，and hostile counterfeit attacking can be prevented effectively.

Key words: MANET, cluster-based architecture, Shamir secret sharing, Verifiable Secret Sharing（VSS）

摘要： 移动Ad hoc网络（MANET）自身的特性使其在安全方面存在较大的局限，这给网络的认证工作提出了较高的要求。基于门限机制的认证技术，提出了一种基于簇结构的证书服务方案，解决了单跳邻居节点小于门限值的问题；同时采用Feldman的可验证秘密共享方案（VSS），防止恶意节点提供虚假的部分证书，降低不可靠的无线信道对证书服务的影响，提高了证书的合成效率，且有效防止敌方的假冒攻击。

关键词: 移动Ad hoc网络, 基于簇的体系结构, Shamir秘密共享, 可验证秘密共享