Multicast is what enables a node on a network to send one unit of data to a special set of receivers. One copy of the data is sent, and multiple copies are created and then sent to the desired recipient. A multicast group is identified by a class D IP address. A host enters or exits a group using IGMP (Internet Group Management Protocol). A message sent via multicast is sent to all nodes on the network, but only the intended nodes accept the multicast frames. Multicasting is useful in situations such as video conferencing and online gaming. Multicast was used originally in LANs, with Ethernet being the best example. A problem with multicast communication is that it is difficult to guarantee that only designated receivers receive the data being sent. This is largely because multicast groups are always changing; users come and go at any time. A solution to the problem of ensuring that only the chosen recipient obtains the data is known as multicast encryption.
The ISO (International Organization for Standardization) states that confidentiality, integrity, authentication, access control, and non-repudiation should all be considered when creating any secure system.
- Confidentiality: No untrusted party can access appropriate messages.
- Integrity: Messages cannot be changed during transit without being discovered.
- Authentication: The message needs to be sent by the person/machine who claims to have sent it.
- Access control: Only those users enabled can access the data.
- Non-repudiation: The receiver can prove that the sender actually sent the message.
To be secure, members who are just being added to the group must be restricted from viewing past data. Also, members removed from a group may not access future data.
One theory for the creation of an encryption protocol explains that ideally, each member of a group should have a key which changes upon the entrance or exit of a member of the group. Another theory suggests a primary key subsidized by additional keys belonging to legitimate group members. One protocol found on The College of New Jersey website called UFTP (encrypted UDP based FTP over multicast) was created in an attempt to solve this problem. The protocol is designed in three phases: announce/register, file transfer, and completion/confirmation. The latest version was released on 3/29/2011 and the source code is available in the website.
Today, one alternative in multicast encryption involves the use of symmetric key encryption where data is decoded by intended receivers using a traffic encryption key (TEK). The TEK is changed any time a member joins or leaves the group. This is not feasible for large groups. Users must be continuously connected to obtain the new keys. Another more common method involves asymmetric keys. Here, a private key is shared and those shares are given out asymmetrically. The initial member is given a number of shares, one of which is passed to each group member. If a member has a valid share of the key, he can view the message.
- ^ a b c d e f Micciancio, Daniele and Saurabh Panjwani. “Multicast Encryption: How to maintain secrecy in large, dynamic groups?”
- ^ a b Duan, Yitao and John Canny. Computer Science Division, UC Berkeley. “How to Construct Multicast Cryptosystems Provably Secure Against Adaptive Chosen Ciphertext Attack”.
- ^ a b c d Pessi, Pekka. Department of Computer Science, Helsinki University Of Technology. “Secure Multicast”.
- ^ Pannetrat, Alain and Refik Molva. “Multiple Layer Encryption for Multicast Groups”.
- ^ “UFTP – Encrypted UDP based FTP with multicast”
Wikimedia Foundation. 2010.
Look at other dictionaries:
Secure multicast — IP Multicast is a communication method where a single data packet can be transmitted from a sender and replicated to a set of receivers. The replication techniques are somewhat dependent upon the media used to transmit the data. Transmission of … Wikipedia
POME — Prisoner Of Mother England (Governmental) ** Prisoners Of Mother England (Community » Law) * Possibly Ok Multicast Encryption (Internet) … Abbreviations dictionary
IEEE 802.11i-2004 — IEEE 802.11i 2004, or 802.11i, is an amendment to the IEEE 802.11 standard specifying security mechanisms for wireless networks. The amendment has been incorporated into the published IEEE 802.11 2007 standard.802.11 is a set of IEEE standards… … Wikipedia
Marratech — AB Type Privately held company Industry web conferencing, videoconferencing Founded 1998 Headquarters Luleå, Sweden Key people … Wikipedia
CHAOS (Linux distribution) — infobox OS name = CHAOS caption = CHAOS 1.6 Boot Welcome Screen developer = Midnight Code / Ian Latter family = Linux source model = Open source latest release version = 1.6 latest release date = April 2005] working state = Currentcite web |… … Wikipedia
HAIPE — A HAIPE (High Assurance Internet Protocol Encryptor) is a Type 1 encryption device that complies with the National Security Agency s HAIPE IS (formerly the HAIPIS, the High Assurance Internet Protocol Interoperability Specification). The… … Wikipedia
JGroups — est un système fiable (i.e. qui ne perd pas les messages) de multicast écrit dans le langage Java. Sommaire 1 Le multicast 2 Extensions fournies par JGroups 3 Usages 4 R … Wikipédia en Français
Java group — JGroups JGroups est un système fiable (i.e. qui ne perd pas les messages) de multicast écrit dans le langage Java. Sommaire 1 Le multicast 2 Extensions fournies par JGroups 3 Usages 4 … Wikipédia en Français
Java groupe — JGroups JGroups est un système fiable (i.e. qui ne perd pas les messages) de multicast écrit dans le langage Java. Sommaire 1 Le multicast 2 Extensions fournies par JGroups 3 Usages 4 … Wikipédia en Français
Java groupes — JGroups JGroups est un système fiable (i.e. qui ne perd pas les messages) de multicast écrit dans le langage Java. Sommaire 1 Le multicast 2 Extensions fournies par JGroups 3 Usages 4 … Wikipédia en Français