不可靠信道上抗主动攻击的组播认证

Multicast Authentication over Lossy Channels Against Active Attack

组播是视频会议、协同工作等各种群组应用的基本通讯模式,组播安全性的研究具有重要意义.组播通常构建在不可靠的通讯协议上,因此存在数据包的丢包现象.大多数的组播认证方案不能用于这种环境,其他一些方案的主要目标是针对网络通讯故障引起的随机包丢失情况,而不能抵抗主动攻击.本文提出了抗部分碰撞哈希函数簇的思想,然后利用哈希图和纠错码技术提构造一种在不可靠信道上新的组播认证方案.该方案不仅具有很高的通讯性能和计算性能,并且在存在部分数据包丢失的情况下也可以抵抗主动攻击.本文提出了一种针对该方案特性的不可靠信道组播认证的形式安全模型,并在此安全模型下基于规约技术证明了该方案的安全性.

Multicast is the fundamental communication mechanism for all sorts of group oriented application sush as video conference or cooperative work. It is important to study and improve the security of mnlticast. As multicast is layered on top of unreliable communication protocols such as UDP in TCP/IP protocol suites, data packets are lost possibly.Most multicast authentication schemes do not tolerate packets loss, some others may only work in random packets loss while vulnerable to active attack. In this paper, a new concept of partial collision resistant hash function is introduced, base on which, together with hash graph and error correcting code,an efficient multicast authentication scheme over lossy channel is presented. The scheme is not only very efficient in computation and communication complexity, but also secure against active attack. After a formal security modeling of multicast authentication schemes over lossy channel, the security of the proposed scheme is proved under this definition.