基于代理的分布式大型动态组播密钥管理协议  

Distributed group key management protocol based on Agent for large dynamic multicast

作　　者：魏楚元[1] 李陶深[2] 王高才[2] 

机构地区：[1]北京建筑工程学院计算机科学与技术系,北京100044 [2]广西大学计算机与电子信息学院,南宁530004

出　　处：《计算机工程与应用》2007年第7期155-159,共5页Computer Engineering and Applications

基　　金：广西留学回国人员科学基金项目(桂科回 0342001);广西科技攻关项目(桂科攻关 0385001)

摘　　要：参照分布式方法代表性协议Iolus提供的组播密钥管理安全框架和因特网组管理协议IGMP,设计了一种新的分布式密钥管理体系结构,组播组由一些分布的组播子组构成,采用一种改进的LKH协议实现子组内密钥管理,提出了一种基于代理的分布式的大型动态组播密钥管理协议,并通过增加签名标记改进了现有密钥管理协议对成员身份认证的不足。与LKH、Iolus协议相比,该文协议降低了“1影响N”问题,具有较好的可扩展性,有效降低了协议通信延迟和带宽等负载。Referring to a muhieast key management security infrastructure offered by a representative protocol ＂Iolus＂ of distributed model and IGMP,a new distributed key management architecture is designed in this paper.In this arehiteeture,multieast group is constructed by some distributed subgroups.An enhanced Logical Key Hierarchy protocol is adopted for subgroup key management.A distributed group key management protocol based on agent for large dynamic multieast is presented.A drawback of existent protocols lack of membership authentication is eliminated by adding signed token to our protocol.This protocol decreases ＂1 affects N＂ , provides better sealability.Compared with LKH and Iolus,it effieiently decreases some overheads such as communication delays and bandwidth.

关 键 词：组播 组密钥管理 逻辑密钥树 密钥更新 组安全代理 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]