树链混合的组播源认证改进方案  

Optimized source authentication scheme for multicast using hybrid tree and chains

作　　者：李洋[1,2] 徐国爱[1] 钮心忻[1] 杨义先[1] 

机构地区：[1]北京邮电大学网络与交换技术国家重点实验室,北京100876 [2]北京财经大学信息学院,北京100081

出　　处：《华中科技大学学报（自然科学版）》2011年第7期50-53,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：中国博士后科学基金资助项目(20100471762);国家和广东省自然科学基金联合基金资助项目(U0835001);国家高技术研究发展计划资助项目(2009AA01Z439)

摘　　要：提出了一种树链混合的组播源认证改进方案.利用认证树构造数据报之间独立的数据报组、TESLA链的公开延迟时间间隔确保数据报组的摘要值的真实性,并经过对TESLA链进一步改进实现零延迟的实时源认证.本方案与其他同类方案相比较,不仅在计算量、通信和存储开销方面均较小,而且能够适用于较复杂的网络环境,可应对报文突发丢失.推导验证表明:即便在丢包概率较高的通信场景中,源认证也几乎不受影响,明显地提高了组播通信中源认证的可靠性.An optimized source authentication scheme for multicast using hybrid tree and chains was presented. Datagram group including independent component was constructed by merkle tree, the validity of Datagram group＇s digest was ensured by disclosed time interval of TESLA （timed efficient stream loss-tolerant authentication） chain, and the real-time source authentication with zero-time de- lay was implemented through improving TESLA chain. Compared with other similar scheme, this scheme obviously decreases communication, computation and storage costs, and it could be compatible with complex network environment and treat bursty loss well. According to derivation and verification, source authentication has almost no effect even in communication scenarios with higher packet loss probability and significantly improved reliability.

关 键 词：组播 源认证 树链混合 认证树 定时有效流损失容忍认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]