securegroupcommunicationkeymanagement

securegroupcommunicationkeymanagement内容摘要：

acts as a domain key manager  Scales but not multicast protocol independent Iolus  The members of a secure group subdivided into subgroups  The overall group is managed by a group security controller (GSC)  Subgroups are managed by group security intermediaries (GSI) or group security agents (GSA)  A message traversing multiple groups will be decrypted and encrypted several times at each GSA. Iolus : The Iolus framework Keygraphs  Secure group members allocated to subgroups. Subgroups may be subsets of larger subgroups  A key graph has group keys at internal nodes and user keys at leaves maintained by group controller  Each member is allocated all keys on the path from the root to the leaf  New key for a subgroup encrypted with all keys from root to the key node that has changed  Need only log(n) messages to rekey a group instead of n messages : Key graph Keygraph member leave example  u9 in lower tree leaves  Group controller creates new group key k18  Group controller creates new subgroup key k78 and unicasts to u7 and u8 encrypted with individual keys Keygraph member leave example (continued)  Group controller encrypts k18 with k456 and multicasts for u4, u5 and u6  Group controller encrypts k18 with k123 and multicasts for u1, u2 an。