CAREER: Key Management for Secure Dynamic Group Communications

职业：安全动态群组通信的密钥管理

• 批准号: 0093187
• 负责人: Radha Poovendran
• 金额: --
• 依托单位: University of Washington
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2001
• 资助国家: 美国
• 起止时间: 2001-05-15 至 2007-09-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0093187&HistoricalAwards=false
• 关键词: CAREER; Key; Management; Secure; Dynamic

Many emerging Internet and broadband wireless network services such as real-time stock quotes and information services, pay per view, and dynamic coalition for collaborations are based on group communications. Innovative new networking specifications such as Bluetooth (1999), WAP (1998), and SWAP (1998) allow multiple devices with different capabilities to form groups and take advantage of each other's capabilities. Emerging from these innovations is the potential for developing group communication at the level of embedded systems, which has enormous ramifications both academically and commercially. The most relevant enabling network technology for group communications is the multicast which supports the requirements of the service providers as well as the end users. However, research into secure multicast communications has been emerging only recently. The extensive efforst addressing reliable data delivery, guaranteed quality of service provision, congestion control and resource allocation for conventional and multi-rate multicast indicate the importance of multicast for Internet applications. However, the adaptation of multicast communications into commercial and selective applications depends on the ability to secure the multicast communications so that only the intended receivers have access to the data. Due to the untrusted nature of the network medium used for multicast communications, securing multicast communications requires cryptographic methods. In particular, generating, storing, distributing, deleting and updating of the cryptographic keys used for secure group communications from the core of the key management problem. This career proposal contains the following three components: Key Distribution: Research into new key distribution schemes that will be significant improvements over the currently available methods and will be efficient with respect to user and/or sender key storage, and rekeying messages whil preventing user collusion with the focus of this effort. PI previously answered a conjecture related to the optimality of a key distribution scheme and demonstrated security flaw of a "secure" multicast key distribution scheme. Group Key Generation: Group key generation schemes allow a set of members to jointly generate cryptographic keys. Permitting group membership changes, preventing illegal collaboration among members trying to steal secrets or bias the final joint key are some of the features that need to be considered in designing new group key generation schemes. The proposed work will be based on the current work of PI in the area of distributed key generation. The past work has resulted in a pending national and international patent and is currently being commercialized by a collaboration with Lockheed Martin Global Telecommunications under Maryland Industrial partnership program. (Dr. Roger Mancuso, CTO, LMCO) Education: PI will develop and introduce two new undergraduate courses at University of Washington Seattle and an advanced network security laboratory that will house the course related projects and basic research. Since there is a strong presence of Information Technology companies in Seattle, the university-industry collaboration will help to provide strong research and educational background to UW students and lead to higher return on investment to the academia, industry and the NSF. PI has been in contact with the research and development groups of security at Microsoft to establish close ties. (Dr. Sekar Chandrasekaran, Lead NT security manager, MSFT)

许多新兴的互联网和宽带无线网络服务（例如实时股票报价和信息服务、按次付费和动态协作联盟）都基于群组通信。 诸如蓝牙（1999）、WAP（1998）和SWAP（1998）等创新的新网络规范允许具有不同能力的多个设备形成组并利用彼此的能力。 从这些创新中出现的是在嵌入式系统的水平上开发组通信的潜力，这在学术和商业上都有巨大的影响。 用于组通信的最相关的使能网络技术是支持服务提供商以及终端用户的要求的多播。 然而，对安全组播通信的研究只是最近才出现的。 传统组播和多速率组播在数据可靠传输、服务质量保证、拥塞控制和资源分配等方面的广泛应用表明组播在Internet应用中的重要性。 然而，将多播通信适配到商业和选择性应用中取决于保护多播通信的能力，使得只有预期的接收器能够访问数据。 由于用于多播通信的网络介质的不可信性质，保护多播通信需要加密方法。 特别是从密钥管理问题的核心出发，研究了用于安全组通信的密钥的生成、存储、分发、删除和更新。 本职业建议书包含以下三个组成部分： 密钥分发：研究新的密钥分发方案，这将是对当前可用方法的重大改进，并且在用户和/或发送方密钥存储方面将是有效的，并且在防止用户共谋的同时更新消息。 PI回答了一个关于密钥分发方案最优性的猜想，并证明了一个“安全”的组播密钥分发方案的安全缺陷。 组密钥生成：组密钥生成方案允许一组成员联合生成加密密钥。 在设计新的组密钥生成方案时，需要考虑允许组成员的变化，防止成员之间的非法合作，试图窃取秘密或偏向最终的联合密钥。 建议的工作将基于PI在分布式密钥生成领域的当前工作。 过去的工作已经导致了一个悬而未决的国家和国际专利，目前正在商业化的合作与洛克希德马丁全球电信根据马里兰州工业合作伙伴计划。 (Dr. LMCO首席技术官Roger Mancuso） 学历：PI将在华盛顿西雅图大学开发和引入两门新的本科课程，并建立一个先进的网络安全实验室，该实验室将容纳与课程相关的项目和基础研究。 由于西雅图有大量的信息技术公司，大学与工业界的合作将有助于为华盛顿大学的学生提供强大的研究和教育背景，并为学术界、工业界和NSF带来更高的投资回报。 PI一直在与微软的安全研究和开发小组联系，以建立密切的联系。 (Dr.微软NT安全经理Sekar Rasekaran）