二階式群播金匙管理

Abstract

當網路風行後，愈來愈多應用軟體都需要進行群組的通訊，然而此類的群組通訊若用傳統點對點方式來傳送群組的資料，將會耗損掉大量的網路資源，且資料亦有被竊取、篡改或假冒的危險。本文提出一個應用於安全群組通訊的二階式群播金匙管理，讓群組通訊在網路舉行時能達到一定的通訊安全且有效率的使用網路資源。一般安全群播需建立一群播金匙的管理機制，使得加解密金匙的共享不限定於兩者之間，而是由群組成員所共享；在本文中，我們利用分層管理的概念將整個群播群組分成路由器區域與成員區域，並分別以霍夫曼樹及完全二元樹的架構來建立其對應的輔助金匙分散樹，這使得我們的群播金匙管理擁有可量化的特性。On Internet, there are more and more group-based applications. The network resources would be inefficiently used if such applications transmitted their group data by traditional unicast. It's well known that multicast can use network bandwidth efficiently. In this paper, we propose a two-level multicast management consisting of a router domain and several member domains. Each member has one group key and a set of auxiliary keys. The auxiliary keys are distributed in a form of a Huffman tree as in the router domain and a form of a complete binary tree in each member router. That makes the key management scalable.