一种新的分组LKH组播密钥管理方案  

Multi-group LKH Key Management Scheme with Secure Multicast Based on IPsec

作　　者：高俊伟[1] 郭福来[2] 

机构地区：[1]中国人民解放军95989部队 [2]中国人民解放军空军装备研究院

出　　处：《小型微型计算机系统》2009年第4期788-791,共4页Journal of Chinese Computer Systems

摘　　要：通信数据的机密性和完整性是通信网络中的两个关键问题.组播通信只能提供给授权用户.接入控制可以通过数据加密来实现,如端到端的加密协议IPSEC.本文研究了现有的组播密钥管理协议,提出一种基于IPsec的分组LKH密钥管理方案.与LKH相比,本方案有效地减小了组播密钥管理开销,使组播且具有更好的扩展性.Data confidentiality and integrity are two critical issues for satellite networks. The multicast traffic should be accessible only to subscribers. Access control can be achieved by data encryption, such as end to end security mechanisms IPsec. In this article, we study current multicast key management protocol, and propose a new key management scheme. The proposed a multi-group LKH（logical key hierarchy）key mamagement scheme with secure multicast based on IPsec. Compared with conventional LKH, this scheme could reduce key management overhead significantly. In addition, the proposed key graph is scalable well for multicast.

关 键 词：安全组播 密钥管理 密钥更新开销 IPSEC 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]