一个安全多播主机结构模型

介绍了IPSec协议和GDOI协议,提出一种基于IPSec协议的安全多播组成员主机模型.设计了模型的框架体系和关键组成模块,阐述了模块间的相互作用机制,对实现IPSec协议的Pluto模块进行了扩展,在Linux系统上实现了GDOI多播密钥管理,从机密性、数据源认证及完整性、组管理及访问控制等方面作了安全性分析,对该模型在安全多播方面的应用前景进行展望.指出今后研究的重点是多播源认证.

A Host Architecture Model for Security-multicast

This paper introduces the IPSec protocol and GDOI protocol. A security multicast system model based on IPSec is proposed. The framework and the key modules are designed, and the interaction mechanism in the modules are discussed. Pluto, an important module of Freeswan software which realizes IPSec protocol, is extended to realize GDOI multicast key management on Linux OS. Security considerations are analyzed in confidentiality, data integrity and authentication, group management and access control. Finally, the prospects of its application are explored, and the direction of further research which should focus on multicast data integrity is pointed out.;