基于IP组播的大型动态组密钥安全管理方案研究

组播的密钥分配不同于传统的单播密钥分配，尤其是对于大型动态组其密钥分配更加复杂，本文讨论了适用于大型动态组的两种密钥分配方案即逻辑密钥层次LKH（Logical Key Hierarchy)方案和单向函数树OFT（One-way Function Tree)方案，对这两种方案的加入／离开操作、组控制器和每个组成员拥有的密钥数、需要单播和广播的消息位数，组管理者和最大成员计算量、要产生的随机密钥位数、可放缩性等方面进行了分析比较，为两处方案的相互结合、取长补短提供了理论依据。

Key Security Management Method of Large Dynamic Groups Based on IP Multicast

The key distribution of multicast is different from the traditional key distribution of unicast. In particular, the key distribution of large dynamic group is more complicated. This paper discusses two kinds of methods of key distribution fitting for large dynamic group, i.e. LKH and OFT method, analyzes and compares the two methods in member adding/leaving, the key number of group controller and group member, broadcast size and unicast size, manager computation and max member computation, random bits generated and scalability. These analysis gives the basis of theory for integration of different methods.