Abstract
Purchase PDF (1032 K)
E-mail Article
Add to my Quick Links
Cited By in Scopus (20)
Purchase PDF (365 K)
doi:10.1016/S0140-3664(00)00255-3 
Copyright © 2000 Elsevier Science B.V. All rights reserved.
Scalable secure one-to-many group communication using dual encryption
References and further reading may be available for this article. To view references and further reading you must purchase this article.
Available online 30 November 2000.
Abstract
Multicasting is a scalable solution for group communication. Whereas secure unicast is a well-understood problem, scalable secure multicast poses several unique security problems, namely group membership control, scalable key distribution to a dynamic group. We address scalability in the proposed protocol by using hierarchical subgrouping. Third party hosts or members of the multicast group, designated as subgroup members, are responsible for secret key distribution and group membership management at the subgroup level. Unlike existing secure multicast protocols, our protocol, through dual encryption, can use “untrusted” subgroup managers (SGMs) to distribute data encryption keys securely. We analytically prove the correctness of the protocol in ensuring secure communication, describe possible collusion scenarios and our protocol's ability to overcome them. We compare our protocol with existing scalable key distribution schemes through simulation using real-life multicast traces and show that our protocol alleviates the encryption overhead at the sender by distributing some of the work among the SGMs. The proposed protocol performs better than the existing scalable protocols as the number of active members in a multicast group increases.
Author Keywords: Secure group communication; Key distribution; Multicast security; Hierarchical subgrouping
Article Outline
- 1. Introduction
- 2. Architecture of the key distribution tree
- 2.1. Group access control
- 2.2. Scalable key distribution
- 3. Dynamic group membership management
- 4. Security analysis of DEP
- 5. Previous research in scalable key distribution
- 5.1. Centralized flat key management
- 5.2. Hierarchical key management
- 5.3. Distributed flat key management
- 5.4. Tabular comparison
- 6. Simulation results and performance comparison
- 6.1. Workload characterization
- 6.2. Performance comparison
- 6.2.1. Encryption cost at the sender
- 6.2.2. Encryption/decryption cost at the members and the SGMs
- 6.2.3. Distribution of encryption/decryption cost
- 6.3. Summary
- 7. Conclusion
- Acknowledgements
- Appendix A. Proofs
- References
- Vitae
Corresponding author. Tel.: +1-9782886406; fax: +1-9782880620; email: ldondeti@nortelnetworks.com
