Secure and accountable multicast data distribution

虽然多播数据通信在用于向许多参与者分发相同的数据时具有显著减少网络资源需求的潜力，并且虽然它已在特定的、受控的环境中使用，但由于必要的安全和会计功能不可用，它尚未被Internet服务提供商作为一般服务提供。解决这个问题需要一个集成的方法，并注意整个协议栈中的安全性和AAA （Authentication, Authorization, and Accounting）。在之前的授权期间，已经制定了总体架构，并提出了以下几个方面的解决方案：密钥管理、路由器到路由器的安全、路由器到主机的安全、路由器到aaa服务器的通信、与金融代表的交互（电子商务交互）、主机和用户识别。在即将到来的拨款期内，将有三个主要活动领域：1)将密钥管理解决方案集成到现有的可扩展路由器（XORP）中；2)设计和验证AAA和主机到路由器协议的必要扩展，以促进对多播服务的精确控制和监控，并将其集成到XORP平台中。3)设计和验证支持树形管理的框架，以支持可靠和不可靠的组播数据分发协议，并将生成的协议集成到XORP平台中。长期目标是证明一种安全的、负责任的组播数据分发系统的可行性。实现这一目标将允许在商业系统中引入多播数据分发，这对此类系统的运营商有直接好处（降低成本和增加收入），并通过降低成本和启用原本不可行的应用而对用户群体有间接好处。

Although multicast data communication has potential for substantially reducing network resource requirements when used to distribute identical data to many participants, and although it has been used in specific, controlled environments, it has not been offered as a general service by Internet Service Providers, since the necessary security and accounting functionality is not available. Solving this problem requires an integrated approach, with attention paid to Security and AAA (Authentication, Authorization, and Accounting) in the entire protocol stack.  During the previous grant period, the overall architecture has been formulated, and solutions proposed for the following areas: key management, router-to-router security, router-to-host security, router-to-AAA server communication, interaction with financial representatives (e-commerce interaction), host and user identification. During the coming grant period, there will be three main areas of activity: 1) Integration of the key management solution into an existing extensible router (XORP); 2) Design and validation of the necessary extensions to the AAA and host-to-router protocols to facilitate the accurate control and monitoring of multicast services, and their integration into the XORP platform. 3) Design and validation of a framework for support of the tree management for a range of reliable and unreliable multicast data distribution protocols, and the integration of the resulting protocols into the XORP platform. The long-term goal is the demonstration of the feasibility of a secure, accountable multicast data distribution system.  Achievement of this goal will permit the introduction of multicast data distribution in commercial systems, with direct benefits to the operators of such systems (lowered costs and increased revenue generation), and indirect benefits to the user communities, through lower costs and by enabling applications that would otherwise be infeasible.