基于MPEG-2传输流的密钥管理协议  

Key Management Protocol based on MPEG-2 Transport Stream

作　　者：张群[1] 谷大武[1] 陆海宁[1] 陈维烨[1] 

机构地区：[1]上海交通大学计算机系,上海200240

出　　处：《通信技术》2008年第12期372-375,378,共5页Communications Technology

基　　金：教育部新世纪优秀人才计划(NCET-05-0398)

摘　　要：文中在参考多媒体密钥管理协议MIKEY的基础上,针对MPEG-2TS的加密传输方案,设计出基于MPEG-2TS的密钥管理协议,包括身份认证、密钥建立、密钥同步和密钥更新等。协议分别针对能否改变PES包结构的不同情况,提出了两种不同的密钥同步方案,并在身份认证过程中采用challenge/response机制防重放攻击,同时还可以安全地抵御中间人攻击、拒绝服务攻击等。On the basis of multimedia Internet KEYing-MIKEY, a key management protocol is design in this paper, which is composed for phases of authentication, key establishment, key synchronization and key update, and can be applied for securing MPEG-2 TS transmission. In addition, two different key synchronization schemes respectively based on the privilege for modifying the structure of PES. The analysis shows that this protocol can avoid replay attacks in the process of authentication by introducing challenge/response mechanism. It can also resist man-in-the-middle attack and denial-of-service attack.

关 键 词：密钥管理 密钥同步 安全协议 MPEG-2 TS MIKEY 流媒体 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]