传统移动Ad Hoc网络匿名路由方案主要基于公钥加密手段构建匿名路径。然而,一旦参与通信的节点私钥泄漏,则匿名路径也会连带泄漏。针对这一问题,本文提出一种具有前向机密性的匿名路由(Forward secure anonymous routing,FSAR)方案。在FSAR中,节点通过基于伪名和双线性对的密钥协商机制动态协商会话密钥,并以此构建前向机密的洋葱路由完成匿名通信。理论分析和仿真实验表明,FSAR可有效解决传统匿名路由方案的前向机密隐患,同时在网络性能方面有更好的表现。
Traditional Ad Hoc anonymous routing schemes establish the anonymous paths by public key encryption means. However, the exposure of privacy keys of communicating nodes will induce the leakiness of anonymous paths. This paper proposes an forward secure anonymous routing (FSAR) scheme to solve such problem. In FSAR, a forward-secret anonymous path is constructed by pairing-based key agreement and onion routing schemes instead of public key encryption. Theoretical analysis and simulation results show that FSAR is a correct and efficient anonymous routing scheme for mobile Ad Hoc networks.