Secure and accountable multicast data distribution

安全可靠的组播数据分发

• 批准号: 8634-2006
• 负责人: Atwood, John
• 金额: $ 1.39万
• 依托单位: Concordia University
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2008
• 资助国家: 加拿大
• 起止时间: 2008-01-01 至 2009-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=389800
• 关键词: Secure; accountable; multicast; data; distribution

Although multicast data communication has potential for substantially reducing network resource requirements when used to distribute identical data to many participants, and although it has been used in specific, controlled environments, it has not been offered as a general service by Internet Service Providers, since the necessary security and accounting functionality is not available. Solving this problem requires an integrated approach, with attention paid to Security and AAA (Authentication, Authorization, and Accounting) in the entire protocol stack.  During the previous grant period, the overall architecture has been formulated, and solutions proposed for the following areas: key management, router-to-router security, router-to-host security, router-to-AAA server communication, interaction with financial representatives (e-commerce interaction), host and user identification. During the coming grant period, there will be three main areas of activity: 1) Integration of the key management solution into an existing extensible router (XORP); 2) Design and validation of the necessary extensions to the AAA and host-to-router protocols to facilitate the accurate control and monitoring of multicast services, and their integration into the XORP platform. 3) Design and validation of a framework for support of the tree management for a range of reliable and unreliable multicast data distribution protocols, and the integration of the resulting protocols into the XORP platform. The long-term goal is the demonstration of the feasibility of a secure, accountable multicast data distribution system.  Achievement of this goal will permit the introduction of multicast data distribution in commercial systems, with direct benefits to the operators of such systems (lowered costs and increased revenue generation), and indirect benefits to the user communities, through lower costs and by enabling applications that would otherwise be infeasible.

尽管多播数据通信在用于将相同的数据分发给许多参与者时具有显著减少网络资源需求的潜力，并且尽管它已经在特定的受控环境中使用，但是由于必要的安全和记账功能不可用，所以它没有被互联网服务提供商作为一般服务来提供。解决这一问题需要一个综合的方法，关注整个协议栈的安全和AAA(认证、授权和计费)。在之前的授权期内，已经制定了总体架构，并提出了以下方面的解决方案：密钥管理、路由器到路由器的安全、路由器到主机的安全、路由器到AAA服务器的通信、与财务代表的交互(电子商务交互)、主机和用户身份识别。在即将到来的授权期间，将有三个主要领域的活动：1)将密钥管理解决方案集成到现有的可扩展路由器(XORP)中；2)设计和验证对AAA和主机到路由器协议的必要扩展，以促进对多播服务的准确控制和监测，并将其集成到XORP平台中。3)设计和验证一个框架，用于支持对一系列可靠和不可靠的组播数据分发协议的树管理，并将产生的协议集成到XORP平台中。长期目标是证明安全、负责任的组播数据分发系统的可行性。这一目标的实现将允许在商业系统中引入组播数据分发，为此类系统的运营商带来直接好处(降低成本和增加收入)，并通过降低成本和启用否则不可行的应用程序而间接受益于用户群体。