In order to solve the problem of asymmetric key management in mobile ad hoc networks, a new distributed asymmetric key management scheme based on lite CA public key authentication framework and Shamir secret sharing scheme was presented. The public key could be certified locally by the mechanism of distributed lite CA certification authentication and so the certification management was not need in the scheme. It also avoided the inherent key escrow problem in identity-based cryptography to combine with the advantages of certificateless public key cryptography and provided the ability to resist the public key substitution attacks. Security analysis and experiment results showed that the scheme is secure and efficient in implementation.
