Secure Multicast Services and Applications

安全组播服务和应用程序

• 批准号: 9977292
• 负责人: Kenneth Calvert
• 金额: $ 26.3万
• 依托单位: University of Kentucky Research Foundation
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 1999
• 资助国家: 美国
• 起止时间: 1999-09-15 至 2005-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=9977292&HistoricalAwards=false
• 关键词: Secure; Multicast; Services; Applications

Most Internet applications are based upon the client-server paradigm and make use of unicast delivery of data sent as independent packets. The technical issues of securing unicast communications for client-server computing is fairly well understood. However, many emerging Internet applications are based upon a group communications model. In particular, they require packet delivery from one or more authorized senders to a large number of authorized receivers. Furthermore, the data of many of these applications should be viewed as flows rather than as independent packets. Conceptually, since every point-to-multipoint communication can be represented as a set of point-to-point communications, and every flow can be treated as a sequence of individual packets, the current technology base for securing unicast packets can be extended in a straightforward manner to securing applications that employ flows and multicasts. Such extensions, however, would be highly inefficient. They will not be applicable to high-speed transmission and delay-sensitive flows, nor scalable to large groups.The objectives of this proposal are to investigate architectures and protocols for securing multicast and flow applications with emphasis on efficiency, latency, and scalability. The researchers have obtained some preliminary results on scalable group key management and efficient digital signatures. These are essential ingredients for designing and implementing secure multicast services. However, to design a scalable service for secure multicast on the Internet, even with just best-effort delivery, several research issues remain, namely, performance comparison of alternative architectures, efficient and reliable delivery of rekey messages (and their impact on a wide area network), and deployment of trusted components and active agents.The researchers next propose to investigate the more difficult problem of reliable secure multicast. For the Internet, this problem has been largely unexplored. Initially, they plan to approach this problem from two directions, namely, (i) how to make reliable multicast secure, and (ii) how to make secure multicast reliable. In addressing this problem, our concerns are, first, correctness, and second, performance issues such as latency and scalability.There are many applications that can benefit from techniques and services for securing flows and multicasts, e.g., teleconference, pay per view, information services, virtual private networks, collaborative work, software distribution, etc. The researchers propose to experiment with some of these applications. In particular, they propose to investigate a less obvious application, namely, active networks, which raises some interesting research issues. Securing active networks is an important problem with many different concerns, some of which are being addressed by other researchers. In the proposed project, the researchers are primarily concerned with characterizing the authenticity and confidentiality requirements of mobile code distribution in active networks and ensuring their satisfaction using efficient methods.

大多数互联网应用程序都是基于客户端-服务器模式，并利用单播传输作为独立的数据包发送的数据。 客户端-服务器计算的单播通信安全的技术问题是相当好理解的。 然而，许多新兴的互联网应用是基于组通信模型的。 特别地，它们需要从一个或多个授权的接收器到大量授权的接收器的分组递送。 此外，这些应用程序中的许多应用程序的数据应被视为流，而不是独立的数据包。 从概念上讲，由于每个点对多点通信都可以表示为一组点到点通信，并且每个流都可以被视为一系列单独的数据包，因此当前用于保护单播数据包的技术基础可以以直接的方式扩展到保护采用流和多播的应用程序。 然而，这样的扩展将是非常低效的。 他们将不适用于高速传输和延迟敏感的流量，也不可扩展到大型groups.The的目标，这项建议是调查的架构和协议，以确保组播和流应用程序的效率，延迟和可扩展性的重点。 研究人员在可扩展的组密钥管理和有效的数字签名方面取得了一些初步成果。 这些都是设计和实现安全组播服务的基本要素。 然而，设计一个可扩展的服务，在互联网上的安全组播，即使只是尽最大努力交付，几个研究问题仍然存在，即，性能比较的替代体系结构，有效和可靠的交付的rekey消息（及其对广域网的影响），和部署的可信组件和主动agents.The研究人员下一步建议调查更困难的问题，可靠的安全组播。对于互联网来说，这个问题在很大程度上还没有被探索。 最初，他们计划从两个方向来解决这个问题，即（i）如何使可靠组播安全，以及（ii）如何使安全组播可靠。在解决这个问题时，我们首先关注的是正确性，其次是性能问题，如延迟和可扩展性。有许多应用程序可以从用于保护流和多播的技术和服务中受益，例如，电话会议、按次付费、信息服务、虚拟专用网络、协同工作、软件分发等。研究人员建议对其中一些应用进行实验。 特别是，他们建议研究一个不太明显的应用，即主动网络，这提出了一些有趣的研究问题。 保护主动网络是一个重要的问题，有许多不同的关注点，其中一些正在解决其他研究人员。 在拟议的项目中，研究人员主要关注的是表征主动网络中移动的代码分发的真实性和保密性要求，并使用有效的方法确保其满意度。