【作者】 李海锋；

【导师】 周健；

【作者基本信息】 合肥工业大学 ， 计算机软件与理论， 2006， 硕士

【摘要】 随着Internet网络的普及和商业化的发展,各种宽带网络应用层出不穷,如:电视会议、股票报价、新闻放送、软件更新、网络游戏等,这些应用都适合采用IP组播技术。组播通信系统的安全越来越成为人们关注的问题,本文主要对组播通信系统的密钥管理方案进行了研究。本文首先介绍了IP组播技术的基本概念,组播密钥管理的概况,组播的安全架构,以及组播的密钥管理协议。 然后对各种组播通信系统的密钥管理方案进行了详细的讨论和分析。组密钥管理协议(GKMP)由于通信开销较大不适合大型的组播系统。LKH树虽然具有一定的可扩展性,但对于组播成员频繁变化的情况难以处理。Iolus方案由于引入过多的中间环节使得组播数据传输的时延较大。 本文通过对大型密钥管理系统的分析提出了两种基于代理的密钥管理方案,通过两次加密使得组播成员的加入和离开只局限在子组范围内,有效解决了扩展性以及组播成员频繁变化的情况:同时为了减少密钥更新时产生的通信开销提出了一种新的密钥管理算法,适合于集中式的密钥管理系统。更多还原

【Abstract】 With the rapid development and commercialization of Internet, there emerges more and more multicast applications. Such as , teleconferencing, news distributing, software update, network gameso As a result, securing group communication will become a critical networking issue. In this dissertation , we mainly study the Key Management System of IP Multicast, At first, the concepts of IP Multicast and Key Management are introduced,, At the same time, we also introduce the security architecture of Multicast and protocols of Key Management,,Then many kinds of Key Management Systems of Multicast are discussed and analysed particularly. GKMP is not adapted to large-scale multicast system because of great communication traffic. Although LKH has good performance in extensibility . it can not be applied into the situation that multicast members change frequently. Iolus causes more delay for more middle entities.The dissertation proposes two kinds of Key Management Systems of Multicast based on agent through analysis on Large-scale Key Management Systems, By adding an encryption at the agent, the joining and leaving of multicast members are limited in subgroups. As a result, the two kinds of Key Management Systems have good performance in extensibility and can be applied into the situation that multicast members change frequently. At the end of the dissertation, we propose a new key updating arithmetic in order to reduce traffic communication for key updating in centralized Key Management Systems.更多还原