Design of large-scale dynamic multicasting security system framework

Abstract

The invention relates to a dynamic secure multicast system architecture in large-scale network environment, which is characterized in that a new set of dynamic secure multicast system architecture is designed; the dynamic secure multicast system architecture divides whole multicast into different areas, only updates the encryption key of a group after the members of each group are changed, avoids system expense brought by the update of the encryption key of whole group caused by frequent changes of group members, realizes the flexible extension mechanism with respect to the encryption key management and data distribution of each subarea, realizes the safe certification mechanism based on Kerberos, so as to carry out management of multicast from the viewpoints of controlling safety and data safety. According to the characteristics and requirements of IPv6 protocol, a set of relatively complete group encryption key management mechanism is realized to be applicable to the requirement for safety and practicability of most multicasts in China Education and Research NET of second generation (CERNET2) and similar network environments.

Description

technical field [0001] The invention relates to a large-scale dynamic security multicast system framework under a large-scale network environment. According to the characteristics and requirements of the IPv6 protocol, a relatively complete set of group key management mechanism is implemented, which is suitable for the security and practicality of most multicast applications in the second generation China Education Research Network (CERNET2) and similar network environments. sexual demands. Background technique [0002] The rapid development and popularization of the Internet has provided a strong market force for the development of multicast services, and multicast is becoming increasingly popular. [0003] Multicast is a multi-receiver-oriented communication method based on UDP / IP protocol. Compared with unicast, it can effectively save server resources and network bandwidth. The Internet Group Management Protocol (IGMP) is used to manage multicast. IGMP does not provid...

AI Technical Summary

Problems solved by technology

[0006] (2) Multicast provides an open group mode, so that group members are not sure which member the data comes from;

However, the cost of security processing due to the change of group members in the IETF structure is relatively high. Although the impact can be reduced by adding distributed multicast groups, the cost of multicast group deployment is correspondingly increased; when managing multiple multicast groups When , there is additional communication overhead for peer entities to communicate to ensure security services between multicast groups

Images