基于LKH树的组播密钥管理方案设计

Design of key management scheme for secure multicast based on LKH tree

组播系统较传统的单播系统更为复杂,更难获得安全保障,在组规模较大的情况下实际应用有一定困难。研究组播通信的安全隐患及组播安全机制优劣的评价标准,对照分析几种典型组播源认证协议的特性、问题及适用场合;以基于LKH树的密钥管理方案和Iolus密钥管理方案为基础,提出一种针对大规模组播的密钥管理方案;指出该方案折中了分布式与层次式密钥管理的优劣,分析该方案的性能优势并验证其性能。

As a result of higher complexity of multicast system than that of conventional unicast system,it is more difficult to guarantee security in group communication,especially when multicast is applied to large scale groups.The potential safety ha-zard of multicast communication and evaluation criterion for multicast security mechanism were surveyed,and several typical multicast source authentication protocols were analyzed and compared for their characters,existing problems and application occasions.Based on LKH tree and Iolus key management scheme,a key management scheme for large scale multicast was proposed.The proposed scheme,of which pros in performance was analyzed,performance was verified,compromised distributed and hierarchical key management scheme.