基于IBC策略驱动的组播内容分发方案

IBC-based policy-driven multicast content distribution scheme

针对内容分发应用中的组播加密方案和多接收者加密方案所存在的动态组密钥管理复杂、计算和通信代价高等问题,分析了内容分发系统的典型安全需求,采用基于身份密码学提出了一种新的面向群组的安全内容分发系统模型与方案,经安全性与性能分析表明,方案满足接收方访问控制、发送方鉴别与防抵赖、策略加密等安全要求。将发送方的计算和通信代价降为O(1),同时具有密钥管理简单、组密钥更新开销小和易于实现等特点,能方便地应用于商业的组播内容分发系统。

The multicast encryption and multi-recipient encryption schemes used in content distribution applications encounter some common problems,such as heavy key management for dynamic groups,high computation and communication costs,etc.Exploits identity-based cryptography is exploited to propose a new group-oriented secure content distribution model and scheme based on security requirements for practical application.The analyses on security and performance show that the scheme meets many essential requirements which include receiver access control,source authentication and non-repudiation,policy-driven encryption,has a O（1） computation and communication cost for sender,and owns properties such as simple group key management,low cost of group key update,ease for implementation.It can be used to deploy a commercial multicast content distribution system.