基于数字证书的树型结构安全多播方案

该文提出一种基于数字证书的安全多播方案，采用树型的多播拓扑结构。多播树中的每个节点都有一个标识其身份的数字证书，除了成员身份认证外，还可以安全地分发会话密钥和实现会话数据的认证，因而减少了多播群密钥管理的复杂度；由于采用分层的树型多播结构，成员加入和退出有了更大的可扩展性。

A tree-type secure multicast scheme based on digital certificate

In this paper, a new scheme based on digital certificate is proposed to implement secure multicast. In the scheme, tree-type multicast topology (multicast tree) is adopted. Each node of the multicast tree possesses a digital certificate which may indicate its identity in the multicast group. Also the certificate may be used for distributing session-key and authenticating session data. So the complexity of managing multicast group key is reduced. And because of tree-type structure of the multicast group, the joining and leaving for multicast member is more scalable.