The VersaKey Framework : versatile Group Key Management
| Autor: | Bernhard Plattner, Dan Sun, Marcel Waldvogel, Germano Caronni, Nathalie Weiler |
|---|---|
| Jazyk: | angličtina |
| Rok vydání: | 1999 |
| Předmět: |
Multicast key distribution schemes
Computer Networks and Communications computer.internet_protocol Computer science Distributed computing Cryptography computer.software_genre Tree-based key distribution Broadcasting (networking) Rekeying Message authentication code Electrical and Electronic Engineering Key management Secure multicast Multicast business.industry Secure multicasting middleware Distributed key management Middleware (distributed applications) Scalability IP multicast The Internet Unicast ddc:004 business computer Computer network |
| Popis: | Middleware supporting secure applications in a distributed environment faces several challenges. Scalable security in the context of multicasting or broadcasting is especially hard when privacy and authenticity is to be assured to highly dynamic groups where the application allows participants to join and leave at any time.Unicast security is well-known and has widely advanced into production state. But proposals for multicast security solutions that have been published so far are complex, often require trust in network components or are inefficient. In this paper, we propose a framework of new approaches for achieving scalable security in IP multicasting. Our solutions assure that that newly joining members are not able to understand past group traffic, and that leaving members may not follow future communication.For versatility, our framework supports a range of closely related schemes for key management, ranging from tightly centralized to fully distributed and even allows switching between these schemes on-the-fly with low overhead. Operations have low complexity (O(log N) for joins or leaves), thus granting scalability even for very large groups. We also present a novel concurrency-enabling scheme, which was devised for fully distributed key management.In this paper we discuss the requirements for secure multicasting, present our flexible system, and evaluate its properties, based on the existing prototype implementation. |
| Databáze: | OpenAIRE |
| Externí odkaz: |
|