IBC虽然避免了复杂的身份认证和庞大的密钥管理问题,但由于IBC的密钥托管机构PKG掌握着主密钥s,而用户的私钥都是藉由s通过一个公开的私钥算法来生成,因此一旦主密钥s泄露或PKG不诚实,则用户的一切信息都将暴露,再无安全性可言。为了解决这个问题,本文提出了一种基于身份的新型密钥托管方案。 Although IBC avoids the problem of complicated authentication and huge key management, because IBC’s key escrow agency PKG holds the master key s, and the user’s private key is obtained through s through a public private key algorithm Generated, so once the master key s leaked or PKG dishonest, all the user’s information will be exposed, no longer at all. In order to solve this problem, this paper proposes a new identity-based key escrow scheme.