CAREER: Key Management for Secure Dynamic Group Communications

许多新兴的互联网和宽带无线网络服务，如实时股票行情和信息服务、按次付费和动态协作联盟，都是基于群组通信的。创新的新网络规范，如蓝牙(1999)、WAP(1998)和交换(1998)，允许具有不同功能的多个设备组成组并利用彼此的功能。从这些创新中涌现出在嵌入式系统层面上开发群组通信的潜力，这在学术和商业上都具有巨大的影响。与组通信最相关的使能网络技术是支持服务提供商和终端用户的需求的组播。然而，对安全多播通信的研究只是最近才出现的。针对传统和多速率组播的可靠数据传输、有保证的服务质量提供、拥塞控制和资源分配的广泛努力表明了组播对于因特网应用的重要性。然而，将多播通信适配到商业和选择性应用中取决于保护多播通信的能力，从而使得只有预期的接收者能够访问数据。由于用于多播通信的网络介质的不可信性，保护多播通信需要加密方法。具体地说，从密钥管理问题的核心开始，生成、存储、分发、删除和更新用于安全组通信的加密密钥。该职业建议包含以下三个部分：密钥分发：研究新的密钥分发方案，该方案将是对当前可用方法的重大改进，并且在用户和/或发送者密钥存储方面将是有效的；以及更新消息的密钥，同时防止用户与该努力的焦点合谋。PI先前回答了一个与密钥分配方案的最优性有关的猜想，并证明了一个“安全的”组播密钥分配方案的安全缺陷。组密钥生成：组密钥生成方案允许一组成员联合生成加密密钥。在设计新的组密钥生成方案时，需要考虑的特征包括允许组成员改变成员身份、防止成员之间非法协作以窃取秘密或偏向最终联合密钥。拟议的工作将基于PI目前在分布式密钥生成领域的工作。过去的工作已经产生了一项悬而未决的国内和国际专利，目前正在通过与洛克希德·马丁全球电信公司根据马里兰州工业合作伙伴计划进行商业化。(罗杰·曼库索博士，LMCO首席技术官)教育：PI将在西雅图华盛顿大学开发和引入两门新的本科课程，以及一个高级网络安全实验室，该实验室将容纳与课程相关的项目和基础研究。由于西雅图有强大的信息技术公司，大学和产业界的合作将有助于为密歇根大学的学生提供强大的研究和教育背景，并为学术界、产业界和NSF带来更高的投资回报。派一直与微软的安全研发团队保持联系，建立了密切的联系。(微软首席NT安全经理Sekar Chandrasekaran博士)

Many emerging Internet and broadband wireless network services such as real-time stock quotes and information services, pay per view, and dynamic coalition for collaborations are based on group communications. Innovative new networking specifications such as Bluetooth (1999), WAP (1998), and SWAP (1998) allow multiple devices with different capabilities to form groups and take advantage of each other's capabilities. Emerging from these innovations is the potential for developing group communication at the level of embedded systems, which has enormous ramifications both academically and commercially. The most relevant enabling network technology for group communications is the multicast which supports the requirements of the service providers as well as the end users. However, research into secure multicast communications has been emerging only recently. The extensive efforst addressing reliable data delivery, guaranteed quality of service provision, congestion control and resource allocation for conventional and multi-rate multicast indicate the importance of multicast for Internet applications. However, the adaptation of multicast communications into commercial and selective applications depends on the ability to secure the multicast communications so that only the intended receivers have access to the data. Due to the untrusted nature of the network medium used for multicast communications, securing multicast communications requires cryptographic methods. In particular, generating, storing, distributing, deleting and updating of the cryptographic keys used for secure group communications from the core of the key management problem. This career proposal contains the following three components: Key Distribution: Research into new key distribution schemes that will be significant improvements over the currently available methods and will be efficient with respect to user and/or sender key storage, and rekeying messages whil preventing user collusion with the focus of this effort. PI previously answered a conjecture related to the optimality of a key distribution scheme and demonstrated security flaw of a "secure" multicast key distribution scheme. Group Key Generation: Group key generation schemes allow a set of members to jointly generate cryptographic keys. Permitting group membership changes, preventing illegal collaboration among members trying to steal secrets or bias the final joint key are some of the features that need to be considered in designing new group key generation schemes. The proposed work will be based on the current work of PI in the area of distributed key generation. The past work has resulted in a pending national and international patent and is currently being commercialized by a collaboration with Lockheed Martin Global Telecommunications under Maryland Industrial partnership program. (Dr. Roger Mancuso, CTO, LMCO) Education: PI will develop and introduce two new undergraduate courses at University of Washington Seattle and an advanced network security laboratory that will house the course related projects and basic research. Since there is a strong presence of Information Technology companies in Seattle, the university-industry collaboration will help to provide strong research and educational background to UW students and lead to higher return on investment to the academia, industry and the NSF. PI has been in contact with the research and development groups of security at Microsoft to establish close ties. (Dr. Sekar Chandrasekaran, Lead NT security manager, MSFT)