基于IP组播的大型动态组密钥安全管理方案研究  

Key Security Management Method of Large Dynamic Groups Based on IP Multicast

作　　者：张斌[1] 邬江兴[1] 

机构地区：[1]国家数字交换系统工程技术研究中心,河南郑州450002

出　　处：《小型微型计算机系统》2002年第8期940-943,共4页Journal of Chinese Computer Systems

摘　　要：组播的密钥分配不同于传统的单播密钥分配 ,尤其是对于大型动态组其密钥分配更加复杂 .本文讨论了适用于大型动态组的两种密钥分配方案即逻辑密钥层次 L KH(L ogical Key Hierarchy)方案和单向函数树 OFT(One- wayFunction Tree)方案 ,对这两种方案的加入 /离开操作、组控制器和每个组成员拥有的密钥数、需要单播和广播的消息位数、组管理者和最大成员计算量、要产生的随机密钥位数、可放缩性等方面进行了分析比较 ,为两种方案的相互结合、取长补短提供了理论依据 .The key distribution of multicast is different from the traditional key distribution of unicast. In particular, the key distribution of large dynamic group is more complicated. This paper discusses two kinds of methods of key distribution fitting for large dynamic group, i.e. LKH and OFT method, analyzes and compares the two methods in member adding/leaving, the key number of group controller and group member, broadcast size and unicast size, manager computation and max member computation, random bits generated and scalability. These analysis gives the basis of theory for integration of different methods.

关 键 词：IP组播 大型动态组密钥 安全管理 逻辑密钥层次 单向函数树 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]