一种新的动态组播源认证方案  

A Novel Dynamic Source Authentication Scheme in Multicast

作　　者：武涛[1] 郑雪峰[2] 白丽珍[1] 

机构地区：[1]中华女子学院计算机系,北京100101 [2]北京科技大学信息工程学院计算机系,北京100083

出　　处：《小型微型计算机系统》2013年第6期1261-1265,共5页Journal of Chinese Computer Systems

基　　金：中华女子学院2012年度校级科研规划课题阶段成果项目资助

摘　　要：组播作为一种非常重要的网络技术,具有减少网络拥塞等诸多优点,必将得到广泛的使用.但缺乏安全机制严重限制了组播在各种网络业务中的应用和推广.源认证作为安全组播的核心问题之一倍受关注.简要介绍了现存的组播源认证方案,指出其优点和缺点.分析了组播源认证目前所面临的问题,探讨和总结了组播源认证的研究现状及发展趋势.同时,基于流签字认证技术,提出了一种新的动态组播源认证方案,该方案通过接收方对丢包率的反馈信息动态调整算法的步长,根据网络的实时状态,采用最合适的流签名算法,减少了哈希运算的次数及对缓存的需求,提高了认证速度,同时降低了通信量,缓解了网络拥塞.最后与相关的方案进行了性能分析和对比.Multicast is a very important network technology, it can reduce the network congestion and has many other advantages, so it is bound to be widely used. However, the lack of security mechanisms severely limits the application and promotion of multicast in a variety of network services. Recently, more and more attention is paid on source authentication as one of the most key problem in secure multicast. The existing source authentication schemes are briefly reviewed and the advantages and disadvantages of these schemes are described, The problems faced by the Multicast Source Authentication is put forward, Also, Research and development trend of the Multicast Source Authentication are Discussed and summarized. Then, a novel dynamic source authentication scheme based on stream signature is proposed. Through dynamic adjusting the algorithm length of stride according to the receivers＇ feedback information on packet lose rate in the network, it can use the most suitable signature algorithm according to the network real-time con- dition. It reduces the number of hash operations and the buffer needs, improves the authentication speed, while reducing network communications, easing network congestion. Finally, performance analysis and comparison is made with other schemes.

关 键 词：安全组播 源认证 哈希函数 流签字 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]