关键词: 虚拟企业, 虚拟认证中心, 可变权限集, 广义信任交互, Pedersen可验证秘密共享, 分布式密钥生成

Abstract: A generalized trust-interaction scheme based on variable privilege sets was proposed, in which the members' privilege sets were assigned flexibly according to the practical organization structures in different Virtual Enterprises (VEs), and they could be dynamically adjusted when there were some member changes. By constructing the corresponding changeable-number party protocols for Virtual Certificate Authority (VCA) establishment, VCA certificates creation and members' redeployment, this scheme could effectively solve the trust-interaction problem in VE with different organization structures. Furthermore, by employing Distributed Key Generation (DKG) protocol based on Pedersen Verifiable Secret Sharing (Pedersen-VSS) technology, this scheme could veritably detect the dishonest behaviors of malicious members, as well as avoid the security flaw in which the master enterprise acted as key distribution center solely. Analysis showed that this generalized trust-interaction scheme was not only more secure, but also more suitable to the complicated and dynamic environment of VE than previous ones.

Key words: virtual enterprise, virtual certificate authority, variable privilege set, generalized trust-interaction, Pedersen verifiable secret sharing, distributed key generation