基于VPN的安全多播系统的设计与实现  

Design and Realization of Secure Multicast Based on VPN

作　　者：黄科烺[1] 方娇莉[2] 

机构地区：[1]华中科技大学计算机学院计算中心,湖北武汉430074 [2]昆明理工大学计算中心,云南昆明650093

出　　处：《昆明理工大学学报（理工版）》2003年第3期80-84,共5页Journal of Kunming University of Science and Technology(Natural Science Edition)

基　　金：教育部下达课题:<教育资源信息安全保障系统--面向现代远程教育的VPN安全传输平台系统>;获2001中央财政专项支持.

摘　　要：多播应用是当今互联网技术发展的热点, 多播数据传输的安全性和可靠性已成为多播技术发展亟待解决的两个问题. 在对多播数据传输的安全问题研究的基础上, 提出了一个基于VPN的安全多播模型, 阐述了它的设计和实现. 分析了多播数据传输的安全问题. 此模型由安全多播网关和安全多播主机组成, 充分利用现有的基于IPSec的VPN系统的体系结构来实现多播数据的安全传输, 实现简单, 结构灵活, 与IPSec兼容. 对安全多播主机和安全多播网关的各个模块进行了设计, 定义了各个模块之间的接口, 比较了安全多播主机和安全多播网关在设计上的不同和相同之处. 实现了安全多播主机和安全多播网关中共有的组密钥管理模块和IPSec模块.The application of multicast technology has become very popular on the Internet. However, thesecurity and reliability issues of multicast data transmission have not been fully addressed. Therefore thesecurity of multicasting transmission is mainly dealt with. A model of secure multicast based on VPN is proposed,and our design and implementation based on this model are described, which consists of secure multicastgateways and secure multicast host. Founded on the existing IPSec VPN,VSM can securely transmit multicastdata. It is neatly structured, compliant with IPSec and can be implemented with little effort. It has developed themodules of multicast secure gateway and hosts. The interfaces between modules are defined. The differencesand similarity of the design of multicast secure gateway and multicast secure host are demonstrated. The MIKEmodule is also implemented.

关 键 词：VPN 安全多播系统 互联网 虚拟专用网 IPSEC协议 IP组播技术 模块设计 用户模块 策略库 MIKE模块 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术] TP393.08[自动化与计算机技术—计算机科学与技术]