可缩放安全多播通信系统的研究和实现

安全多播是近年的因特网安全的一个研究热点。在分析安全多播需求的基础上,提出了一种可缩放的多层安全多播框架HPNSM,其中位于高层的管理者采用分布式密钥协商方式,低层的管理域可根据不同情况采用不同的密钥管理方式。高层的管理者拥有自己的多播地址,并由通过选举算法产生组管理者进行管理。组密钥的更新由低层管理域触发,由子组管理者产生新的组密钥并发送给所有的管理域。和已有的方法相比,HPNSM可以避免多播管理者单点失效问题,减少密钥更新代价,并具有较强的可用性。

Research and Implementation on Scalable Secure Multicast System

Based on the requirement of secure multicast,a scalable multi-layer secure multicast framework HPNSM is proposed.The way of the key management used by the managers in the high layer is key negotiation.Meanwhile,the lower layer can use various methods of key management.The managers in the high layer have their own multicast address and are managed by a group manager which is elected by the corresponding algorithms.Group rekey is triggered by the managers in the lower layer.The new group key is produced by the group manager and is distributed to all other managers except itself.Compared with other methods,HPNSM can prevent single point failure and reduce the overhead of rekey and has a better availability.