标准摘要
[中文适用范围]： 本部分 ISO/IEC 11770 规定了多实体密钥建立机制，以根据现行安全策略提供处理对称或不对称加密算法中使用的加密密钥材料的程序。它定义了具有密钥分发中心（KDC）的多实体基于对称密钥的密钥建立机制，并定义了基于一般树结构的基于对称密钥的密钥建立机制，包括个体重新密钥和批量重新密钥。它还定义了基于密钥链的密钥建立机制，包括无限前向密钥链和有限前向密钥链。这两种类型的密钥建立机制可以由应用程序组合使用。本部分 ISO/IEC 11770 还描述了携带密钥材料或为建立密钥材料所需条件所必需的消息所需的内容。 [外文原描述]： ISO/IEC 11770-5:2011 specifies key establishment mechanisms for multiple entities to provide procedures for handling cryptographic keying material used in symmetric or asymmetric cryptographic algorithms according to the security policy in force. It defines the symmetric key based key establishment mechanisms for multiple entities with a key distribution centre (KDC), and defines symmetric key establishment mechanisms based on general tree based structure with both individual rekeying and batched rekeying. It also defines key establishment mechanisms based on key chain with both unlimited forward key chain and limited forward key chain. Both key establishment mechanisms can be combined by applications. ISO/IEC 11770-5:2011 also describes the required content of messages which carry keying material or are necessary to set up the conditions under which the keying material can be established.
英文名称Information technology - Security techniques - Key management - Part 5: Group key management