Group broadcast cipher key managing method based on physical layer

Abstract

The present invention discloses a kind of managing method for group transmission key secret code based on the physical levels of group transmission network. It relates to internet safety group transmission field, which is used as a means for graduating subgroup, group transmission key secret code administration and group transmission communication in the group transmission service, thus reducing the expenses for the renewal of the group key secret code. The source of group transmission uses the local subgroup communication key secret code with the SEK data, transmit it to the physical subgroup; and after the local physical subgroup of the group safety agent has received, deciphered it, then it uses the communication key secret code with enciphered data of the logical subgroup to transmit it to other physical subgroups, and the other physical subgroups of the group safety agents, having received it, use the logical subgroup communication key secret code with encryption group to transmit it to the group transmitting receivers of the physical subgroup. The group transmitting receivers use the local transmission key secret code to obtain data through decryption. The invention can effectively divide the subgroups and resolve the problem of the key secret code administration of the safety group transmission, thus reducing the expenses for the renewal of the group transmission key secret code without limitation to scope and with favorable expansion.

Description

Technical field: [0001] The invention relates to the field of Internet security multicast, and is used for subgroup division, multicast key management and multicast communication methods in multicast service. Background technique: [0002] Multicast technology can save network resources and is convenient to use in one-to-many and many-to-many situations. Multicast technology is increasingly applied to various broadband services, such as news on demand, video conferencing, and so on. [0003] Figure 1 shows a network topology diagram of a multicast service. The multicast sending source (sender, Sender) accesses the network through a multicast router (Multicast Router, MR), and sends multicast data to the multicast address (such as 192.168.2.9 in Figure 1); The network sends a joining request message (IGMP), joins the multicast group as a multicast member (Receiver / Member), and receives multicast data (such as 192.168.3.11 and 192.168.6.141 in Figure 1); the subnet does not ...

AI Technical Summary

Problems solved by technology

In the existing multicast key management method, the key update is carried out simultaneously for all users in the current multicast group. When the scale of the multicast group is large, the overhead of each key update will be very large, which seriously affects QoS

Images