Authenticated Group Key Management Scheme in Service Chain

The service chain, which is not dependent on the special hardware facilities and the network topology is changeable, is studied, and an authenticated group key management scheme suitable for service chain is proposed. The scheme is based on the bilinear mapping cryptosystem and combines the threshold idea with the identity authentication method, which improves the efficiency and security of the protocol. This scheme also realizes the connection security between the virtual network functions in the service chain while carrying out group key updating, and proves its correctness and security. The analysis results show that the scheme is suitable for the dynamic key management of service chain with the advantages of small number of wheels and small computing overhead in ensuring the safety of each instance in the service chain.