USRE40708E1 - Dual encryption protocol for scalable secure group communication - Google Patents
Dual encryption protocol for scalable secure group communication Download PDFInfo
- Publication number
- USRE40708E1 USRE40708E1 US11/332,880 US33288006A USRE40708E US RE40708 E1 USRE40708 E1 US RE40708E1 US 33288006 A US33288006 A US 33288006A US RE40708 E USRE40708 E US RE40708E
- Authority
- US
- United States
- Prior art keywords
- subgroup
- key
- sender
- encryption key
- host
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Lifetime
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
- H04L9/0833—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key
- H04L9/0836—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] involving conference or group key using tree structure or hierarchical structure
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0442—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
- H04L63/064—Hierarchical key distribution, e.g. by multi-tier trusted parties
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/065—Network architectures or network communication protocols for network security for supporting key management in a packet data network for group communications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
- H04L63/0823—Network architectures or network communication protocols for network security for authentication of entities using certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/104—Grouping of entities
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
Definitions
- the present invention relates generally to multicasting. More particularly, the invention relates to a dual encryption protocol for scalable secure group communication.
- Multicasting poses several problems that do not come up in securing unicast data transfers.
- multicast addresses are not private, which enables any interested host to join the multicast session without any hindrance.
- multicast data is transmitted over many channels of the network, which presents multiple opportunities for attacks such as eavesdropping.
- any host in the Internet can send irrelevant data to the multicast group, which may cause congestion.
- the universal knowledge of multicast addresses also allows any host to pose as a member of the group, thereby allowing it to gain access to the multicast data.
- adversaries can possibly disrupt the multicast protocol itself by posing as legitimate members of the group.
- Multicasting is a scalable way of transmitting data to a group hosts and any secure multicasting protocol must be scalable as well.
- a secure group communication protocol should provide group membership control, secure key distribution, and secure data transfer. If the multicast group membership is dynamic, i.e., if the group members join and leave during the course of a multicast session, the secret keys need to be updated accordingly. In other words, members of a multicast session must not be able to access the multicast data transmitted before their membership has begun or after their membership has expired. Scalability in this context implies that the overhead involved in key updates, data transmission and encryption must be independent of the size of the multicast group. The other requirement of scalability is that the addition or removal of a host from the group should not affect all the members of the group. The second rule is called “1 affects n” scalability problem.
- Centralized flat schemes consist of a single entity distributing the encryption keys to the group members. On each membership change the group manager securely transmits updated key(s) to all the members. Thus these schemes suffer from the 1 affects n scalability problem.
- Hierarchical schemes distribute encryption keys via a distribution tree.
- Two classes of hierarchical protocols have been proposed. The first class uses a hierarchy of keys while the second group uses a hierarchy of nodes to achieve scalability.
- Hierarchical key based schemes suffer from the 1 affects n scalability problem.
- Typical hierarchical node schemes entrust internal nodes of the key-distribution tree with the distribution of the encryption keys. But they offer no mechanism to hide secure multicast data from the internal nodes.
- the present invention proposes a dual encryption protocol (DEP) for scalable secure multicasting which supports one-to-many group communication.
- DEP dual encryption protocol
- the invention uses hierarchical subgrouping of multicast members to address scalability. Each subgroup is managed by a subgroup manager (SGM) which assists in key distribution as well as group access control.
- SGM subgroup manager
- the protocol also distinguishes between participants and members of the multicast group.
- Members of the multicast group are leaf nodes and internal nodes (SGMs) in the key distribution tree, that are entitled to the multicast data.
- participants of the multicast group are SGMs that assist in enforcing the secure multicast protocol without having any access to the multicast data.
- the dual encryption scheme enables the protocol to hide multicast data from the participants.
- FIG. 1 is a data structure diagram of the capability certificate
- FIG. 2 is a logical tree structure in accordance with the present invention.
- FIG. 3 is a data structure diagram of the authorization certificate
- FIG. 4 is a sequence diagram illustrating the process for joining a multicast group in accordance with the present invention.
- the dual encryption protocol is well suited for scalable secure multicasting.
- the protocol supports secure one-to-many groups communication, dynamic group membership and is scalable.
- the protocol uses hierarchical subgrouping of multicast members to address scalability.
- Each subgroup is managed by a subgroup manager (SGM).
- SGMs are either routers or hosts in the network that can handle the workload of managing a subgroup of the multicast group. The assumption is that the SGMs conform to the secure multicast protocol and do not actively participate in disrupting it.
- Participants and members of the group Members of the group are end-hosts or SGMs that are entitled to the multicast data.
- participants of the group are SGMs that assist in enforcing the secure multicast protocol without having any access to the multicast data. With this distinction, it is possible to have SGMs assist in the secure multicast protocol without getting access to multicast data.
- the dual encryption protocol uses two sets of encryption keys that assist in secure distribution of data encryption keys to multicast members.
- the first set of keys called local subgroup keys (LS) are used by SGMs to distribute encrypted data and encryption keys to their corresponding subgroup members.
- the second set of keys called top level key encrypting keys (KEK) are used by the sender to hide data encryption keys from participant SGMs.
- the logical tree structure classifies the members and participants of the multicast group into key groups. The members in each key group get access to the same KEK. Nodes of each subtree rooted at one of the sender's children belong to the same key group. Nodes of different subtrees rooted at the sender's children may belong to the same key group. The number of key groups however is limited by the number of SGMs among the sender's children.
- the protocol uses public-key encryption for securely distributing the top level KEK's and the subgroup keys.
- the protocol uses capability certificates to enforce group access control.
- An exemplary capability certificate is shown in FIG. 1 .
- access control lists can be very large.
- the sender may not know all the group members in advance.
- Our protocol requires that all the members obtain a capability certificate from designated certification authorities.
- These certificates authenticate hosts and authorize them to be members of the multicast group.
- the authorization information also includes the time duration for which the group member is entitled to multicast data.
- the sender and the SGMs verify the capability certificates before distributing encryption keys to group members.
- FIG. 2 illustrates an exemplary logical tree structure in accordance with the invention.
- the tree structure illustrated is merely exemplary (other tree structures are possible).
- the tree structure illustrated is a logical tree structure; that is, the actual physical connections among nodes, and the route a communication would take are not restricted to this logical tree structure.
- the logical tree structure 10 thus serves as a framework or structure for managing membership in the multicast group and for managing access to multicast data.
- members of the multicast group are nodes of a tree.
- the top node 12 is the sender node.
- the sender node sends multicast data to one or more end-host nodes, depending on their authorization.
- the top node (sender) 12 has, in this illustration, three child nodes 14 , 16 and 18 . Each of these child nodes may define what we call a key group. In FIG. 2 , child nodes 14 and 18 , themselves, have children; node 16 is childless. Thus in this illustration there are two key groups, one containing node 14 and its children and one containing node 18 and its children. In the description that follows, we refer to the key group containing node 14 as key group 1 . Key group 1 is shown in dotted lines designated by reference numeral 20 .
- Logical tree 10 forms part of a key distribution tree as will be more fully explained below.
- the key distribution tree can be either an extension of a multicast data distribution tree or a virtual tree at the application level.
- the key distribution tree also defines what we call subgroups. Subgroups are represented by non-leaf nodes and their children. In FIG. 2 , the leaf nodes have been designated as end-host members h i . In FIG. 2 the non-leaf nodes have been designated as either subgroup manager (SGM) participants p i or SGM members g i . Thus FIG. 2 illustrates four subgroups corresponding to the following SGM's: p 1 , g 2 , g 1 and p2 .
- SGM subgroup manager
- lower case p 2 's subgroup is shown in dashed lines at 22 . Similar in structure is the top level subgroup shown in dashed lines at 24 .
- the top level subgroup contains at its head the top node (sender node) 12 .
- Each subgroup manager (SGM) is responsible for generating a secret key and sharing it with all the corresponding subgroup members in a secure fashion. For instance, in FIG. 2 , p 1 shares the subgroup key LS p1 with its children, g 2 and h 2 . We refer to this key as a local subgroup key.
- the local subgroup key forms one part of the dual key protocol needed to access encrypted data.
- the sender node 12 generates another key that we call the key encrypting key or KEK.
- Sender node 12 generates a top level KEK for each of the key groups.
- Sender node 12 also generates a local subgroup key for the top level subgroup 24 .
- the KEK's are used to hide data encryption keys from the participants of a multicast group.
- One KEK is generated for each of the key groups. These keys are distributed to the multicast members by the sender.
- a KEK is shared by all the nodes in a key group that are members of the multicast group. In this context, it is important to distinguish a member from a participant. Participants assist in enforcing the secure multicast protocol, but they do not have any access to the multicast data.
- the sender 12 assigns and distributes key group ID's to the subgroup managers that are members of the top level subgroup. Each SGM disseminates its key group ID to its subgroup members when they join the group. Thus, all the members and participants of the multicast session are aware of the corresponding key group ID.
- the join protocol described below, serves as the mechanism for distributing the secret keys in accordance with the dual encryption scheme.
- a new host H 1 when a new host H 1 wants to join the secure multicast group, it sends a message to all SGMs of the multicast group as illustrated at 101 .
- the message includes host H 1 's capability certificate 50 .
- host H 1 waits until one of the SGMs answers.
- SGM g 1 responds that it can handle the additional work load of another member in its subgroup. More specifically, the responding SGM first verifies that the capability certificate is approved or denied. Assuming the certificate is approved, the responding SGM sends a return message comprising its SGM I.D. 52 and its keygroup I.D. 54 .
- SGM g 1 responds first.
- Other SGMs such as g 2 or g 3 may also respond, or not, depending on whether they can support the additional workload.
- Host H 1 chooses the first positive response it receives (from SGM g 1 ) thereby choosing it as its subgroup manager.
- the enrolling host H 1 then sends a message to the sender S, comprising authentication information about itself, the responding SGM's identity 52 and the corresponding keygroup identity 54 .
- the authentication information may be either in the form of a capability certificate 50 , or other identifier used by the sender to consult an access control list (a database of all hosts that can join).
- the sender S uses the capability certificate 50 to decide whether H 1 is an authorized member of the multicast group. It also checks to see if H 1 has previously requested to join the multicast. This last verification guards against a misbehaving host, trying to join multiple subgroups simultaneously. After the new host's membership is validated, the sender generates message 104 , containing a number of items including an authorization certificate 56 .
- the data structure of the presently preferred authorization certificate is shown in FIG. 3 .
- the authorization certificate contains the new host's identity (H 1 ), the corresponding SGM's identity and the keygroup identity.
- Sender S 1 signs the certificate with its private key, as illustrated diagrammatically by lock 58 .
- the authorization certificate is an authentic record of the new host's affiliation to the multicast group.
- Sender S 1 also sends the top level KEK encryption key 60 to the joining host.
- This KEK corresponds to the keygroup identity that H 1 is now a part of.
- Sender S 1 signs the top level KEK with its private key, as depicted diagrammatically by lock 62 .
- the sender encrypts both authorization certificate 56 and KEK 60 with the host's public key for secrecy.
- the host's public key is depicted diagrammatically by lock 64 .
- sender S 1 signs the authorization certificate and KEK separately. This allows H 1 to produce the signed authorization certificate without having to disclose the KEK.
- Sender S 1 updates its multicast membership database with the new host's authorization certificate. The membership database is used when the sender refreshes the KEK's.
- host H 1 uses its private key to decrypt the sender's message (to unlock lock 64 ). It further uses the sender's public key to decrypt the KEK 60 and authorization certificate 56 (unlocking locks 62 and 64 , respectively).
- host H 1 issues message 105 to SGM g 1 .
- This message supplies g 1 with the new host's authorization certificate 56 .
- Subgroup manager g 1 then adds the new host to its subgroup members'list.
- SGM g 1 then changes its subgroup key, signs it (lock 66 ), encrypts it with H 1 's public key (lock 68 ) and sends it in message 106 to H 1 .
- the SGM's signature (lock 66 ) guards against masquerading attacks.
- the subgroup key, LS key 70 is changed to keep the new host from decrypting multicast data sent before it joined the group.
- SGM g 1 multicasts its signed new subgroup key to all its subgroup members, encrypted with the old subgroup key. This is illustrated at step 107 .
- new host H 1 acquires the KEK key 60 and the LS key 70 . Both keys are required to decrypt multicast data at host H 1 .
- FIG. 4 has thus illustrated an example of the join protocol.
- Table 2 For readers who prefer a more succinct representation, refer to Table 2.
- authorization certificates serve the important function of eliminating the possibility of an adversary with a valid capability certificate gaining access to all keys managed by the sender and all of the SGMs in the multicast group.
- the sender checks for duplicate joins by the same host, before issuing an authorization certificate.
- These certificates authorize the joining host to gain access to only one local subgroup key.
- Subgroup managers that are members of the multicast group follow the join protocol described above for hosts.
- the only change is that the sender updates its SGM database.
- the join protocol used for SGMs that are merely participants is different, and somewhat more complex.
- the sender first verifies if the participant SGM is a former member of the multicast group. If the participant SGM is in the membership database, the corresponding KEK needs to be updated. To change a KEK, the sender sends a message to all the members which hold that KEK, asking them to request the new KEK. The members which need the new KEK respond with their authorization certificates.
- the sender verifies the authorization certificates, and constructs a list of members authorized to receive the updated KEK.
- the sender then changes the KEK, signs it, and encrypts it with the public keys of all of the members in the list. It then multicasts all the encrypted KEKs to the multicast group.
- Each member waiting for the new KEK decrypts the encrypted KEK intended for it. Finally, the sender updates its membership database, conforming to the authorization list it compiled above. After the verification process and possible modification of a KEK, the join process of a participant SGM follows the same protocol as described above for member SGMs. The only exception that a participant SGM does not receive a KEK.
- KEKs need to be changed only when a former member of the multicast group wants to rejoin as a participant SGM.
- an application may deny the join request of a participant SGM if it is still in the membership database.
- the sender generates a data encryption key (DEK) to be used in a conventional encryption algorithm.
- DEK data encryption key
- suitable algorithms can be found in Handbook of Applied Cryptography, A. Menezes, P. Van Oorschot, S. VanStone, CRC Press, 1997; and Network and InternetWork Security, W. Stallings, Prentice-Hall, Inc., 1995.
- the sender sends the multicast data encrypted with the DEK to the group.
- the sender computes a one-way hash function of the data and sends the hash value (HV) along with the DEK to multicast members securely.
- the members also compute the hash value of multicast data and compare it to the HV received, to verify the integrity of the data.
- the DEKs are distributed via the key distribution tree.
- the sender generates a key distribution packet (ES LSs [[ES KEK1 [DEK, HV]], [ES LSs [ES KEK2 [DEK, HV]]]), where LS s is the subgroup key of the top level subgroup.
- ES LSs [[ES KEK1 [DEK, HV]], [ES LSs [ES KEK2 [DEK, HV]]]
- LS s is the subgroup key of the top level subgroup.
- Each of the sender's children decrypts its part of the key distribution packet.
- Each of them then encrypts its piece of the packet with the subgroup key they manage and multicasts the encrypted DEK to its children.
- P 1 multicasts the encrypted packet that contains ES LSp1 [ES KEK1 [DEK, HV]], to g 2 and h 2 .
- other SGMs forward the encrypted DEK to their respective subgroup members. All the members of the multicast group with a local subgroup key and the corresponding KEK acquire the DEK and HV. The DEK is used by the members to decrypt the multicast data and HV is used to verify the integrity of multicast data. Note that the SGMs that are also members of the multicast group will have access to the corresponding KEK. Other SGMs will just participate in the secure multicast protocol by managing their corresponding subgroup key and forwarding the encrypted DEK. Table 3 lists the steps in the DEK distribution protocol. In the table, we assume that there are c key groups and that SGM g i , which is one of the sender's children, belongs to the key group K i .
- the membership of a multicast group member may expire as per the membership duration information in the capability certificate. It is also possible that either the sender or the corresponding SGM may have to expel a misbehaving member. In either case, the ex-member of the multicast session must not be able to decrypt the multicast data. To do that, the corresponding SGM changes the local subgroup key. It then encrypts the new subgroup key with the public keys of each of its children and multicasts that information to them. Each of the children decrypts its part of that message and extracts the updated subgroup key. Revisiting our example in FIG. 2 , if the host h 9 leaves the multicast group, the corresponding subgroup manager, p 2 changes the subgroup key and securely sends the new key to the hosts h 8 and h 10 separately.
- Dual encryption of the DEK simplifies the removal of an SGM from the multicast group. All we need to do is to remove the SGM, find a replacement and notify the subgroup members of the change. Note that each SGM is a member of a subgroup managed by its parent. The parent SGM removes the leaving SGM, following a procedure identical to that of removing a member of the multicast group. The sender needs to locate another SGM that replaces the leaving SGM. After finding a replacement, the sender notifies the members of the subgroup managed by the leaving SGM about their new subgroup manager. The sender also updates its lists of SGMs. The new SGM follows the join protocol to become either a participant or a member of the multicast group. After that, it generates the subgroup key and securely distributes that key to its subgroup members.
- the sender and the SGMs refresh their keys periodically to guard against eavesdropping.
- a subgroup manager follows the same leave protocol procedure described above.
- the SGM changes the key, signs it and encrypts it with the public keys of all the subgroup members. It then locally multicasts the updated subgroup key to its subgroup members.
- Refreshing KEKs is a complex procedure is expected to be done infrequently.
- the sender can change a KEK following the mechanism described in join protocol section above. In general, KEKs may be refreshed depending on the frequency of hosts rejoining the multicast group.
- the number of KEKs can be between zero and the number of SGMs in the top level subgroup. When the number of KEKs is zero all the SGMs automatically receive access to multicast data. The use of a single KEK gives us the capability of denying access of multicast data to SGMs. However, the KEK may need to be refreshed/updated more often since it is shared by all of the members. As the number of KEKs increase the refresh/update frequency decreases. The upper bound to the number of KEKs is the number of SGMs that are also members of the top level subgroup. Notes on Implementing the Dual Encryption Protocol
- the hierarchy can be an extension of a reliable multicast tree used in RMTP.
- RMTP Reliable Multicast Transport Protocol
- it can be implemented at the application level.
- the sender we designate the group manager. In reality, it may not be possible for the sender to handle the workload of enforcing a secure multicast protocol. We suggest the use of a trusted third party to manage the secure multicast group in such cases.
- SGMs can either be routers or hosts in the Internet that are capable of handling the workload of managing a subgroup. Also, an SGM should not actively participate in disrupting the secure multicast protocol. Any router or host which meets these requirements can be chosen as an SGM. The requirements may be stricter if the SGM wants to be a member as well. The membership duration needs to be taken into consideration in this case.
- Locating the SGMs is the next problem. We suggest the use of anycast to the multicast group as a possible solution. Alternatively, routers in the network may maintain a database of SGMs corresponding to a secure multicast group. Newly joining host may then request the router for the SGM addresses.
- the number of members in each subgroup and the number of levels in the key distribution tree are other crucial design parameters. Recall that the subgrouping is to avoid the 1 affects n scalability problem. If a subgroup is very large we may run into scalability problems. Also note that all the SGMs translate the encrypted KEKs for their subgroup members. As the number of levels in the key distribution tree increases, the number of translations increase. With increased number of translations the latency in distributing the keys may become significant.
Abstract
A logical tree structure and method for managing membership in a multicast group provides scalability and security from internal attacks. The structure defines key groups and subgroups, with each subgroup having a subgroup manager. Dual encryption allows the sender of the multicast data to manage distribution of a first set of encryption keys whereas the individual subgroup managers manage the distribution of a second set of encryption keys. The two key sets allow the sender to delegate much of the group management responsibilities without compromising security because a key from each set is required to access the multicast data. Security is further maintained via a method in which subgroup managers can be either member subgroup managers or participant subgroup managers. Access to both keys is provided to member subgroup managers whereas access to only one key is provided to participant subgroup managers. Nodes can be added without the need to generate a new encryption key at the top level which provides improved scalability.
Description
This application claims the benefit of U.S. Provisional Application No. 60/142,495, filed on Jul. 6, 1999. The disclosure of the above application is incorporated herein by reference.
The present invention relates generally to multicasting. More particularly, the invention relates to a dual encryption protocol for scalable secure group communication.
With the widespread use of the Internet, securing data transmissions is an important requirement for many applications. Several protocols exist to address security in data networks with respect to unicasting. Unfortunately, these protocols cannot be easily extended to protect multicast data.
Multicasting poses several problems that do not come up in securing unicast data transfers. First, multicast addresses are not private, which enables any interested host to join the multicast session without any hindrance. Next, multicast data is transmitted over many channels of the network, which presents multiple opportunities for attacks such as eavesdropping. Furthermore, any host in the Internet can send irrelevant data to the multicast group, which may cause congestion. The universal knowledge of multicast addresses also allows any host to pose as a member of the group, thereby allowing it to gain access to the multicast data. Finally, adversaries can possibly disrupt the multicast protocol itself by posing as legitimate members of the group.
Multicasting is a scalable way of transmitting data to a group hosts and any secure multicasting protocol must be scalable as well. A secure group communication protocol should provide group membership control, secure key distribution, and secure data transfer. If the multicast group membership is dynamic, i.e., if the group members join and leave during the course of a multicast session, the secret keys need to be updated accordingly. In other words, members of a multicast session must not be able to access the multicast data transmitted before their membership has begun or after their membership has expired. Scalability in this context implies that the overhead involved in key updates, data transmission and encryption must be independent of the size of the multicast group. The other requirement of scalability is that the addition or removal of a host from the group should not affect all the members of the group. The second rule is called “1 affects n” scalability problem.
Several protocols have been proposed to support secure multicasting. Based on the corresponding key distribution protocols, we can broadly classify them into three categories, viz., centralized flat schemes, distributed flat schemes and hierarchical schemes.
Centralized flat schemes consist of a single entity distributing the encryption keys to the group members. On each membership change the group manager securely transmits updated key(s) to all the members. Thus these schemes suffer from the 1 affects n scalability problem.
Distributed flat schemes trust all the group members equally. Members joining early create and distribute the encryption keys. Trusting all the members makes this protocol vulnerable to security attacks from inside the group.
Hierarchical schemes distribute encryption keys via a distribution tree. Two classes of hierarchical protocols have been proposed. The first class uses a hierarchy of keys while the second group uses a hierarchy of nodes to achieve scalability.
Hierarchical key based schemes suffer from the 1 affects n scalability problem. Typical hierarchical node schemes entrust internal nodes of the key-distribution tree with the distribution of the encryption keys. But they offer no mechanism to hide secure multicast data from the internal nodes.
The present invention proposes a dual encryption protocol (DEP) for scalable secure multicasting which supports one-to-many group communication. The invention uses hierarchical subgrouping of multicast members to address scalability. Each subgroup is managed by a subgroup manager (SGM) which assists in key distribution as well as group access control. The protocol also distinguishes between participants and members of the multicast group. Members of the multicast group are leaf nodes and internal nodes (SGMs) in the key distribution tree, that are entitled to the multicast data. On the other hand, participants of the multicast group are SGMs that assist in enforcing the secure multicast protocol without having any access to the multicast data. The dual encryption scheme enables the protocol to hide multicast data from the participants.
For a more complete understanding of the invention, its objects and advantages, reference may be had to the following specification and to the accompanying drawings.
The dual encryption protocol is well suited for scalable secure multicasting. The protocol supports secure one-to-many groups communication, dynamic group membership and is scalable. The protocol uses hierarchical subgrouping of multicast members to address scalability. Each subgroup is managed by a subgroup manager (SGM). SGMs are either routers or hosts in the network that can handle the workload of managing a subgroup of the multicast group. The assumption is that the SGMs conform to the secure multicast protocol and do not actively participate in disrupting it. There is a distinction between participants and members of the group. Members of the group are end-hosts or SGMs that are entitled to the multicast data. On the other hand, participants of the group are SGMs that assist in enforcing the secure multicast protocol without having any access to the multicast data. With this distinction, it is possible to have SGMs assist in the secure multicast protocol without getting access to multicast data.
The dual encryption protocol uses two sets of encryption keys that assist in secure distribution of data encryption keys to multicast members. The first set of keys, called local subgroup keys (LS), are used by SGMs to distribute encrypted data and encryption keys to their corresponding subgroup members. The second set of keys, called top level key encrypting keys (KEK), are used by the sender to hide data encryption keys from participant SGMs. The logical tree structure classifies the members and participants of the multicast group into key groups. The members in each key group get access to the same KEK. Nodes of each subtree rooted at one of the sender's children belong to the same key group. Nodes of different subtrees rooted at the sender's children may belong to the same key group. The number of key groups however is limited by the number of SGMs among the sender's children. The protocol uses public-key encryption for securely distributing the top level KEK's and the subgroup keys.
The protocol uses capability certificates to enforce group access control. An exemplary capability certificate is shown in FIG. 1. For large multicast groups, access control lists can be very large. Furthermore, the sender may not know all the group members in advance. Our protocol requires that all the members obtain a capability certificate from designated certification authorities. These certificates authenticate hosts and authorize them to be members of the multicast group. The authorization information also includes the time duration for which the group member is entitled to multicast data. The sender and the SGMs verify the capability certificates before distributing encryption keys to group members.
Table 1 below sets for the notation used in this document to describe the presently preferred protocol. Reference may be had to this table when reviewing the equations set forth herein.
TABLE 1 |
Notation Used in this Paper |
s | Sender |
SGM | Subgroup manager |
LSi | Local subgroup key managed by SGM i |
Mi | Set of subgroup members of SGM i |
κi | Set of nodes of the key distribution tree in the key group i |
KEKi | Key encrypting key corresponding to the key group |
DEK | Data encryption key used i encrypting multicast data |
CCx | Capability Certificate of x |
ACx | Authorization Certificate issued to x by s |
KUx | Public-key of x |
KRx | Private-key of x |
EP | Public-key encryption |
ES | Secret-key encryption |
HV | Hash value |
x→y: w | x sends “w” to y |
As depicted in FIG. 2 , members of the multicast group are nodes of a tree. The top node 12 is the sender node. The sender node sends multicast data to one or more end-host nodes, depending on their authorization.
The top node (sender) 12 has, in this illustration, three child nodes 14, 16 and 18. Each of these child nodes may define what we call a key group. In FIG. 2 , child nodes 14 and 18, themselves, have children; node 16 is childless. Thus in this illustration there are two key groups, one containing node 14 and its children and one containing node 18 and its children. In the description that follows, we refer to the key group containing node 14 as key group 1. Key group 1 is shown in dotted lines designated by reference numeral 20.
Each subgroup manager (SGM) is responsible for generating a secret key and sharing it with all the corresponding subgroup members in a secure fashion. For instance, in FIG. 2 , p1 shares the subgroup key LSp1 with its children, g2 and h2. We refer to this key as a local subgroup key. The local subgroup key forms one part of the dual key protocol needed to access encrypted data.
The sender node 12 generates another key that we call the key encrypting key or KEK. Sender node 12 generates a top level KEK for each of the key groups. Sender node 12 also generates a local subgroup key for the top level subgroup 24. The KEK's are used to hide data encryption keys from the participants of a multicast group. One KEK is generated for each of the key groups. These keys are distributed to the multicast members by the sender. A KEK is shared by all the nodes in a key group that are members of the multicast group. In this context, it is important to distinguish a member from a participant. Participants assist in enforcing the secure multicast protocol, but they do not have any access to the multicast data. In the exemplary embodiment shown in FIG. 2 , there could be at most two key groups, corresponding to each of the sender's children that are also SGM's, namely participant SGM p1 and member SGM g1. The end-host member h1 could belong to either one of the key groups.
All members and participants of the multicast group must be aware of the key group they belong to. We delegate the responsibility of propagating this information to the subgroup managers. The sender 12 assigns and distributes key group ID's to the subgroup managers that are members of the top level subgroup. Each SGM disseminates its key group ID to its subgroup members when they join the group. Thus, all the members and participants of the multicast session are aware of the corresponding key group ID. The join protocol, described below, serves as the mechanism for distributing the secret keys in accordance with the dual encryption scheme.
Join Protocol
Referring to FIG. 4 , when a new host H1 wants to join the secure multicast group, it sends a message to all SGMs of the multicast group as illustrated at 101. The message includes host H1's capability certificate 50. After sending its message to all SGMs of the group, host H1 waits until one of the SGMs answers. In this illustration, SGM g1 responds that it can handle the additional work load of another member in its subgroup. More specifically, the responding SGM first verifies that the capability certificate is approved or denied. Assuming the certificate is approved, the responding SGM sends a return message comprising its SGM I.D. 52 and its keygroup I.D. 54.
In the illustrated example, SGM g1 responds first. Other SGMs, such as g2 or g3 may also respond, or not, depending on whether they can support the additional workload.
Host H1 chooses the first positive response it receives (from SGM g1) thereby choosing it as its subgroup manager.
The enrolling host H1 then sends a message to the sender S, comprising authentication information about itself, the responding SGM's identity 52 and the corresponding keygroup identity 54. The authentication information may be either in the form of a capability certificate 50, or other identifier used by the sender to consult an access control list (a database of all hosts that can join).
The sender S uses the capability certificate 50 to decide whether H1 is an authorized member of the multicast group. It also checks to see if H1 has previously requested to join the multicast. This last verification guards against a misbehaving host, trying to join multiple subgroups simultaneously. After the new host's membership is validated, the sender generates message 104, containing a number of items including an authorization certificate 56.
The data structure of the presently preferred authorization certificate is shown in FIG. 3. The authorization certificate contains the new host's identity (H1), the corresponding SGM's identity and the keygroup identity. Sender S1 signs the certificate with its private key, as illustrated diagrammatically by lock 58. The authorization certificate is an authentic record of the new host's affiliation to the multicast group.
Sender S1 also sends the top level KEK encryption key 60 to the joining host. This KEK corresponds to the keygroup identity that H1 is now a part of. Sender S1 signs the top level KEK with its private key, as depicted diagrammatically by lock 62. Then the sender encrypts both authorization certificate 56 and KEK 60 with the host's public key for secrecy. The host's public key is depicted diagrammatically by lock 64.
Note that sender S1 signs the authorization certificate and KEK separately. This allows H1 to produce the signed authorization certificate without having to disclose the KEK. Sender S1 updates its multicast membership database with the new host's authorization certificate. The membership database is used when the sender refreshes the KEK's.
In the final phase of the join protocol, host H1 uses its private key to decrypt the sender's message (to unlock lock 64). It further uses the sender's public key to decrypt the KEK 60 and authorization certificate 56 (unlocking locks 62 and 64, respectively).
Next, host H1 issues message 105 to SGM g1. This message supplies g1 with the new host's authorization certificate 56. Subgroup manager g1 then adds the new host to its subgroup members'list. SGM g1 then changes its subgroup key, signs it (lock 66), encrypts it with H1's public key (lock 68) and sends it in message 106 to H1. The SGM's signature (lock 66) guards against masquerading attacks. The subgroup key, LS key 70, is changed to keep the new host from decrypting multicast data sent before it joined the group.
Separately, SGM g1 multicasts its signed new subgroup key to all its subgroup members, encrypted with the old subgroup key. This is illustrated at step 107.
As a result of the above-described procedure, new host H1 acquires the KEK key 60 and the LS key 70. Both keys are required to decrypt multicast data at host H1.
TABLE 2 |
Steps in the Join Protocol |
(1) h→All SGMs: | CCn | ||
(2) g→h: | SGM Id (g), Key group Id (κi) | ||
(3) h→s: | CCn, g, κ i | ||
(4) g→h: | EPKUn[EPKRn[ACn], EPKRn[KEK1]] | ||
(5) h→g: | ACn | ||
(6) g→h: | EPKUh[EPKRg[LSg]] | ||
(7) g→Mg: | ESLSg[EPKRg[LSg]] | ||
In view of the foregoing, it should be stressed that authorization certificates serve the important function of eliminating the possibility of an adversary with a valid capability certificate gaining access to all keys managed by the sender and all of the SGMs in the multicast group. In our protocol, the sender checks for duplicate joins by the same host, before issuing an authorization certificate. These certificates authorize the joining host to gain access to only one local subgroup key.
Having thus described the join protocol by which a new host may join the secure multicast group, we now describe the join protocol used by subgroup managers. Subgroup managers (SGMs) that are members of the multicast group follow the join protocol described above for hosts. The only change is that the sender updates its SGM database. The join protocol used for SGMs that are merely participants is different, and somewhat more complex. The sender first verifies if the participant SGM is a former member of the multicast group. If the participant SGM is in the membership database, the corresponding KEK needs to be updated. To change a KEK, the sender sends a message to all the members which hold that KEK, asking them to request the new KEK. The members which need the new KEK respond with their authorization certificates. The sender verifies the authorization certificates, and constructs a list of members authorized to receive the updated KEK. The sender then changes the KEK, signs it, and encrypts it with the public keys of all of the members in the list. It then multicasts all the encrypted KEKs to the multicast group.
Each member waiting for the new KEK decrypts the encrypted KEK intended for it. Finally, the sender updates its membership database, conforming to the authorization list it compiled above. After the verification process and possible modification of a KEK, the join process of a participant SGM follows the same protocol as described above for member SGMs. The only exception that a participant SGM does not receive a KEK.
While the process of changing a KEK is somewhat computationally costly, KEKs need to be changed only when a former member of the multicast group wants to rejoin as a participant SGM. To avoid changing KEKs frequently, an application may deny the join request of a participant SGM if it is still in the membership database.
Secure Communication
The sender generates a data encryption key (DEK) to be used in a conventional encryption algorithm. In this regard, suitable algorithms can be found in Handbook of Applied Cryptography, A. Menezes, P. Van Oorschot, S. VanStone, CRC Press, 1997; and Network and InternetWork Security, W. Stallings, Prentice-Hall, Inc., 1995. The sender sends the multicast data encrypted with the DEK to the group. Next, the sender computes a one-way hash function of the data and sends the hash value (HV) along with the DEK to multicast members securely. The members also compute the hash value of multicast data and compare it to the HV received, to verify the integrity of the data.
While the encrypted multicast data is sent through traditional multicast channels, the DEKs are distributed via the key distribution tree. We use the key distribution tree in FIG. 2 to illustrate the DEK distribution. The sender generates a key distribution packet (ESLSs[[ESKEK1[DEK, HV]], [ESLSs[ESKEK2[DEK, HV]]]), where LSs is the subgroup key of the top level subgroup. Each of the sender's children decrypts its part of the key distribution packet. Each of them then encrypts its piece of the packet with the subgroup key they manage and multicasts the encrypted DEK to its children. In our example in FIG. 2 , P1 multicasts the encrypted packet that contains ESLSp1 [ESKEK1[DEK, HV]], to g2 and h2. Similarly, other SGMs forward the encrypted DEK to their respective subgroup members. All the members of the multicast group with a local subgroup key and the corresponding KEK acquire the DEK and HV. The DEK is used by the members to decrypt the multicast data and HV is used to verify the integrity of multicast data. Note that the SGMs that are also members of the multicast group will have access to the corresponding KEK. Other SGMs will just participate in the secure multicast protocol by managing their corresponding subgroup key and forwarding the encrypted DEK. Table 3 lists the steps in the DEK distribution protocol. In the table, we assume that there are c key groups and that SGM gi, which is one of the sender's children, belongs to the key group Ki.
TABLE 3 |
Steps in the DEK Distribution Protocol |
s→M,: . . . ESLSn[ESKEK1[DEK | ||
HV]], . . . ESLSn[ESKEKc[DEK, HV]] | ||
gi→Mgi: . . . ESLSn[ESKEKc[DEK, HV]] | ||
Leave Protocol
The membership of a multicast group member may expire as per the membership duration information in the capability certificate. It is also possible that either the sender or the corresponding SGM may have to expel a misbehaving member. In either case, the ex-member of the multicast session must not be able to decrypt the multicast data. To do that, the corresponding SGM changes the local subgroup key. It then encrypts the new subgroup key with the public keys of each of its children and multicasts that information to them. Each of the children decrypts its part of that message and extracts the updated subgroup key. Revisiting our example in FIG. 2 , if the host h9 leaves the multicast group, the corresponding subgroup manager, p2 changes the subgroup key and securely sends the new key to the hosts h8 and h10 separately.
Note that the KEK known to the leaving host need not be changed right away. The sender can periodically change those keys depending on the frequency of hosts rejoining the group. Since any member needs to know both the corresponding subgroup key and the key encrypting key to decrypt the DEK, changing even one of them is sufficient. We list the steps of the leave protocol in Table 4. In the table, we assume that hi left from SGM g, where Mg={h1, h2, . . . , hm} and that LS′g is the new subgroup key.
TABLE 4 |
Steps in the Leave Protocol |
g→Mg: EPKUhi[EPKRg[LS′g]], | ||
. . . , EPKUhi−1[EPKRgLS′g]], | ||
EPKRgLS′g]], EPKUi+1[EPKRg[LS′g]], | ||
. . . , EPKUhm−1[EPKRgLS′g]] | ||
Dual encryption of the DEK simplifies the removal of an SGM from the multicast group. All we need to do is to remove the SGM, find a replacement and notify the subgroup members of the change. Note that each SGM is a member of a subgroup managed by its parent. The parent SGM removes the leaving SGM, following a procedure identical to that of removing a member of the multicast group. The sender needs to locate another SGM that replaces the leaving SGM. After finding a replacement, the sender notifies the members of the subgroup managed by the leaving SGM about their new subgroup manager. The sender also updates its lists of SGMs. The new SGM follows the join protocol to become either a participant or a member of the multicast group. After that, it generates the subgroup key and securely distributes that key to its subgroup members.
Key Refresh
The sender and the SGMs refresh their keys periodically to guard against eavesdropping. To change the subgroup key, a subgroup manager follows the same leave protocol procedure described above. In brief, the SGM changes the key, signs it and encrypts it with the public keys of all the subgroup members. It then locally multicasts the updated subgroup key to its subgroup members. Refreshing KEKs is a complex procedure is expected to be done infrequently. The sender can change a KEK following the mechanism described in join protocol section above. In general, KEKs may be refreshed depending on the frequency of hosts rejoining the multicast group.
Tuning the Number of Key Encrypting Keys The number of KEKs can be between zero and the number of SGMs in the top level subgroup. When the number of KEKs is zero all the SGMs automatically receive access to multicast data. The use of a single KEK gives us the capability of denying access of multicast data to SGMs. However, the KEK may need to be refreshed/updated more often since it is shared by all of the members. As the number of KEKs increase the refresh/update frequency decreases. The upper bound to the number of KEKs is the number of SGMs that are also members of the top level subgroup.
Notes on Implementing the Dual Encryption Protocol
Notes on Implementing the Dual Encryption Protocol
We conclude the description of the dual encryption protocol by a discussion on possible modes of implementation. The first issue involves the construction of the key distribution tree. The hierarchy can be an extension of a reliable multicast tree used in RMTP. In this regard, see S. Paul, K. Sabnani, J. Lin, and S. Bhattacharyya. Reliable Multicast Transport Protocol (RMTP), IEEE Journal on Selected Areas in Communications, 15(3):407421, April 1997. Alternatively, it can be implemented at the application level. In this description of DEP, we designate the sender as the group manager. In reality, it may not be possible for the sender to handle the workload of enforcing a secure multicast protocol. We suggest the use of a trusted third party to manage the secure multicast group in such cases.
Next, we discuss the selection of subgroup managers. As described earlier, SGMs can either be routers or hosts in the Internet that are capable of handling the workload of managing a subgroup. Also, an SGM should not actively participate in disrupting the secure multicast protocol. Any router or host which meets these requirements can be chosen as an SGM. The requirements may be stricter if the SGM wants to be a member as well. The membership duration needs to be taken into consideration in this case.
Locating the SGMs is the next problem. We suggest the use of anycast to the multicast group as a possible solution. Alternatively, routers in the network may maintain a database of SGMs corresponding to a secure multicast group. Newly joining host may then request the router for the SGM addresses.
The number of members in each subgroup and the number of levels in the key distribution tree are other crucial design parameters. Recall that the subgrouping is to avoid the 1 affects n scalability problem. If a subgroup is very large we may run into scalability problems. Also note that all the SGMs translate the encrypted KEKs for their subgroup members. As the number of levels in the key distribution tree increases, the number of translations increase. With increased number of translations the latency in distributing the keys may become significant.
While the invention has been described in its presently preferred embodiments, it will be understood that the invention is capable of certain modification and change without departing from the spirit of the invention as set forth in the appended claims.
Claims (16)
1. A method for adding a host to a multicast group comprising the steps of:
identifying a key group and a subgroup for said host to join, said key group defined by a child node of a sender of multicast data and all descendant nodes of said child node of said sender, said subgroup defined by a subgroup manager and all child nodes of said subgroup manager;
said sender issuing a first encryption key to said host, said first encryption key corresponding to said key group; and
said subgroup manager issuing a second encryption key to said host, said second encryption key corresponding to said subgroup, both said first encryption key and said second encryption key required to access a data encryption key, said data encryption key providing access to said multicast data.
2. The method of claim 1 wherein said host requests authorization from the sender by providing its identity.
3. The method of claim 2 wherein the identity of said host is provided by a capability certificate or access control list.
4. The method of claim 1 further comprising the steps of:
transmitting a capability certificate from said host to said subgroup manager;
said subgroup manager verifying said capability certificate; and
said subgroup manager transmitting a key group identifier and a subgroup manager identifier to said host when said capability certificate is valid.
5. The method of claim 1 further comprising the steps of:
transmitting a capability packet from said host to said sender;
said sender verifying said capability packet;
said sender transmitting said first encryption key and an authorization certificate to said host when said capability packet is valid, said first encryption key and said authorization certificate encrypted with a public encryption key for said host; and
said sender updating a member database, said member database representing nodes of said multicast group entitled to said multicast data.
6. The method of claim 5 wherein said capability packet comprises authentification information, a subgroup manager identifier and a key group identifier.
7. The method of claim 5 further comprising the step of verifying that said host has not previously requested to join said multicast group.
8. The method of claim 1 further comprising the steps of:
transmitting an authorization certificate from said host to said subgroup manager, said authorization certificate encrypted with said host's private encryption key;
said subgroup manager verifying said private encryption key;
said subgroup manager changing said second encryption key;
said subgroup manager issuing said changed second encryption key to said host; and
said subgroup manager issuing said changed second encryption key to remaining child nodes of said subgroup manager.
9. The method of claim 1 further comprising the step of recruiting a participant subgroup manager, said participant subgroup manager representing a node which is not entitled to said multicast data.
10. The method of claim 9 wherein said participant subgroup manager has access to only one of said first and second keys and therefore cannot decrypt said multicast data.
11. The method of claim 9 further comprising the steps of:
determining whether said participant subgroup manager is in a member database;
said sender changing said first encryption key corresponding to said key group when said participant subgroup manager is in said member database;
said sender issuing said first encryption key to members of said key group, said members defined by child nodes holding said first encryption key before it was changed.
12. A multicast group comprising:
a logical tree structure, said structure having a sender node and said sender node having one or more child nodes;
a key group, said key group defined by a child node of said sender node and all descendant nodes of said child node, said sender node issuing a first encryption key to member nodes of said key group after verifying that said member nodes have not previously requested to join the multicast group, said member nodes defined by nodes of said key group; and
a subgroup, said subgroup defined by a subgroup manager and child nodes of said subgroup manager, said subgroup manager issuing a second encryption key to said subgroup, both said first encryption key and said second encryption key required to access a data encryption key, said data encryption key providing access to multicast data.
13. The multicast group of claim 12 further comprising a member database representing nodes of said multicast group entitled to said multicast data, wherein said subgroup manager is excluded from said member database.
14. The method of claim 1 further comprising a method for deleting a predetermined host from said multicast group comprising the steps of:
said subgroup manager changing said second encryption key to a third encryption key and sending said third encryption key to all members of said subgroup excluding said predetermined host.
15. The method of claim 14 wherein said first encryption key remains unchanged.
16. A system for implementing scalable secure multicasting comprising:
a hierarchical structure of nodes logically organized as one or more subgroups each subgroup having an associated subgroup manager and at least one child node that functions as the recipient of multicast information;
said subgroup manager issuing a subgroup key for use by its associated subgroup;
said hierarchical structure of nodes further having a root node that functions as the sender of multicast information, the root node and its hierarchically adjacent children logically defining a plurality of key groups;
said sender separately issuing a key group key to each of said key groups;
said sender supplying multicasting information to said host using a dual encryption protocol such that both subgroup key and key group key are required at said host to decrypt the multicast information, one or more of said subgroup managers being a participant subgroup manager, wherein said participant subgroup managers are not entitled to the multicast information; and
said sender determining whether said participant subgroup managers are in a member database.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/332,880 USRE40708E1 (en) | 1999-07-06 | 2006-02-24 | Dual encryption protocol for scalable secure group communication |
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US14249599P | 1999-07-06 | 1999-07-06 | |
US09/401,450 US6263435B1 (en) | 1999-07-06 | 1999-09-22 | Dual encryption protocol for scalable secure group communication |
US11/332,880 USRE40708E1 (en) | 1999-07-06 | 2006-02-24 | Dual encryption protocol for scalable secure group communication |
Related Parent Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/401,450 Reissue US6263435B1 (en) | 1999-07-06 | 1999-09-22 | Dual encryption protocol for scalable secure group communication |
Publications (1)
Publication Number | Publication Date |
---|---|
USRE40708E1 true USRE40708E1 (en) | 2009-05-05 |
Family
ID=26840150
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/401,450 Ceased US6263435B1 (en) | 1999-07-06 | 1999-09-22 | Dual encryption protocol for scalable secure group communication |
US11/332,880 Expired - Lifetime USRE40708E1 (en) | 1999-07-06 | 2006-02-24 | Dual encryption protocol for scalable secure group communication |
Family Applications Before (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
US09/401,450 Ceased US6263435B1 (en) | 1999-07-06 | 1999-09-22 | Dual encryption protocol for scalable secure group communication |
Country Status (6)
Country | Link |
---|---|
US (2) | US6263435B1 (en) |
EP (1) | EP1198920A4 (en) |
JP (1) | JP2003503949A (en) |
KR (1) | KR100495539B1 (en) |
CN (1) | CN1160897C (en) |
WO (1) | WO2001003364A1 (en) |
Cited By (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20060107051A1 (en) * | 2004-11-18 | 2006-05-18 | Samsung Electronics Co., Ltd. | Method of receiving session key in home network and method of reproducing content using the same |
US20080253391A1 (en) * | 2007-04-10 | 2008-10-16 | Alexander Krits | Protocol Negotiation for a Group Communication System |
US20090113559A1 (en) * | 2007-10-26 | 2009-04-30 | Red Hat, Inc. | Stateless challenge-response protocol |
US20090217386A1 (en) * | 2008-02-27 | 2009-08-27 | James Paul Schneider | Stateless challenge-response broadcast protocol |
US20100023752A1 (en) * | 2007-12-27 | 2010-01-28 | Motorola, Inc. | Method and device for transmitting groupcast data in a wireless mesh communication network |
US20110026714A1 (en) * | 2009-07-29 | 2011-02-03 | Motorola, Inc. | Methods and device for secure transfer of symmetric encryption keys |
US8291103B1 (en) * | 2007-11-29 | 2012-10-16 | Arris Solutions, Inc. | Method and system for streaming multimedia transmissions |
US8793766B2 (en) | 2012-03-13 | 2014-07-29 | International Business Machines Corporation | Method and apparatus for security-aware elasticity of application and services |
Families Citing this family (139)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4051510B2 (en) * | 1998-07-16 | 2008-02-27 | ソニー株式会社 | Data storage device and data storage method |
GB2353682B (en) * | 1999-07-15 | 2004-03-31 | Nds Ltd | Key management for content protection |
IL130963A (en) * | 1999-07-15 | 2006-04-10 | Nds Ltd | Key management for content protection |
US7181014B1 (en) | 1999-09-10 | 2007-02-20 | Cisco Technology, Inc. | Processing method for key exchange among broadcast or multicast groups that provides a more efficient substitute for Diffie-Hellman key exchange |
US7103185B1 (en) * | 1999-12-22 | 2006-09-05 | Cisco Technology, Inc. | Method and apparatus for distributing and updating private keys of multicast group managers using directory replication |
US7260716B1 (en) | 1999-09-29 | 2007-08-21 | Cisco Technology, Inc. | Method for overcoming the single point of failure of the central group controller in a binary tree group key exchange approach |
US7013389B1 (en) | 1999-09-29 | 2006-03-14 | Cisco Technology, Inc. | Method and apparatus for creating a secure communication channel among multiple event service nodes |
US6684331B1 (en) | 1999-12-22 | 2004-01-27 | Cisco Technology, Inc. | Method and apparatus for distributing and updating group controllers over a wide area network using a tree structure |
US7434046B1 (en) | 1999-09-10 | 2008-10-07 | Cisco Technology, Inc. | Method and apparatus providing secure multicast group communication |
US6987855B1 (en) | 1999-09-10 | 2006-01-17 | Cisco Technology, Inc. | Operational optimization of a shared secret Diffie-Hellman key exchange among broadcast or multicast groups |
JP3570311B2 (en) * | 1999-10-07 | 2004-09-29 | 日本電気株式会社 | Wireless LAN encryption key update system and update method thereof |
ES2205703T3 (en) * | 1999-10-18 | 2004-05-01 | Irdeto Access B.V. | METHOD FOR THE DISTRIBUTION OF KEYS BETWEEN A SERIES OF DEVICES WITH SAFETY CHARACTERISTICS, METHOD FOR COMMUNICATION WITH A SERIES OF DEVICES WITH THE SAME CHARACTERISTICS, SECURITY SYSTEM AND SET OF DEVICES WITH SECURITY CHARACTERISTICS. |
US7203834B1 (en) * | 1999-12-02 | 2007-04-10 | International Business Machines Corporation | Method of updating encryption keys in a data communication system |
US7089211B1 (en) * | 2000-01-12 | 2006-08-08 | Cisco Technology, Inc. | Directory enabled secure multicast group communications |
US7065643B1 (en) * | 2000-03-28 | 2006-06-20 | Motorola, Inc. | Network compromise recovery methods and apparatus |
JP4023083B2 (en) * | 2000-04-06 | 2007-12-19 | ソニー株式会社 | Information processing system, information processing method, information recording medium, and program providing medium |
JP2001352321A (en) * | 2000-04-06 | 2001-12-21 | Sony Corp | Information processing system, information processing method, and information recording medium, and program providing medium |
RU2002100081A (en) | 2000-04-06 | 2003-07-27 | Сони Корпорейшн (JP) | System and method for processing information |
US6718361B1 (en) * | 2000-04-07 | 2004-04-06 | Network Appliance Inc. | Method and apparatus for reliable and scalable distribution of data files in distributed networks |
DE60136861D1 (en) * | 2000-06-21 | 2009-01-15 | Sony Corp | Device and method for key renewal in a hierarchical tree key structure |
US6882730B1 (en) * | 2000-06-29 | 2005-04-19 | Intel Corporation | Method for secure distribution and configuration of asymmetric keying material into semiconductor devices |
US6941457B1 (en) * | 2000-06-30 | 2005-09-06 | Cisco Technology, Inc. | Establishing a new shared secret key over a broadcast channel for a multicast group based on an old shared secret key |
US7454484B1 (en) * | 2000-11-16 | 2008-11-18 | Nortel Networks Limited | Method and apparatus for producing a multicast tree |
US7301946B2 (en) * | 2000-11-22 | 2007-11-27 | Cisco Technology, Inc. | System and method for grouping multiple VLANs into a single 802.11 IP multicast domain |
CN100499799C (en) * | 2000-12-22 | 2009-06-10 | 爱迪德艾恩德霍芬公司 | Transmission system of supplying conditional access for transmitted data |
JP4710132B2 (en) * | 2000-12-26 | 2011-06-29 | ソニー株式会社 | Information processing system, information processing method, and program recording medium |
JP4078802B2 (en) | 2000-12-26 | 2008-04-23 | ソニー株式会社 | Information processing system, information processing method, information processing apparatus, information recording medium, and program recording medium |
JP4581246B2 (en) | 2000-12-26 | 2010-11-17 | ソニー株式会社 | Information processing system, information processing method, and program recording medium |
US9520993B2 (en) * | 2001-01-26 | 2016-12-13 | International Business Machines Corporation | Renewable traitor tracing |
US7039803B2 (en) * | 2001-01-26 | 2006-05-02 | International Business Machines Corporation | Method for broadcast encryption and key revocation of stateless receivers |
US20020150097A1 (en) * | 2001-02-21 | 2002-10-17 | Wei Yen | Method and apparatus for secured multicasting |
SE522794C2 (en) * | 2001-02-23 | 2004-03-09 | Ericsson Telefon Ab L M | Device and method for communicating electronic data via a network infrastructure having a unicast mechanism and multicast mechanism |
US20020154782A1 (en) * | 2001-03-23 | 2002-10-24 | Chow Richard T. | System and method for key distribution to maintain secure communication |
JP2002319932A (en) | 2001-04-19 | 2002-10-31 | Sony Corp | Device and method for recording information, device and method for reproducing information, and program |
US7500104B2 (en) * | 2001-06-15 | 2009-03-03 | Microsoft Corporation | Networked device branding for secure interaction in trust webs on open networks |
US7096356B1 (en) * | 2001-06-27 | 2006-08-22 | Cisco Technology, Inc. | Method and apparatus for negotiating Diffie-Hellman keys among multiple parties using a distributed recursion approach |
US7082200B2 (en) * | 2001-09-06 | 2006-07-25 | Microsoft Corporation | Establishing secure peer networking in trust webs on open networks using shared secret device key |
WO2003028284A1 (en) * | 2001-09-26 | 2003-04-03 | Synchron Networks | Secure broadcast system and method |
US7487363B2 (en) * | 2001-10-18 | 2009-02-03 | Nokia Corporation | System and method for controlled copying and moving of content between devices and domains based on conditional encryption of content key depending on usage |
JP3864247B2 (en) * | 2001-10-19 | 2006-12-27 | インターナショナル・ビジネス・マシーンズ・コーポレーション | Network system, terminal device, information distribution method and decoding method |
CN1620780A (en) * | 2001-10-26 | 2005-05-25 | 松下电器产业株式会社 | Key management apparatus |
US7334125B1 (en) | 2001-11-27 | 2008-02-19 | Cisco Technology, Inc. | Facilitating secure communications among multicast nodes in a telecommunications network |
US7340603B2 (en) | 2002-01-30 | 2008-03-04 | Sony Corporation | Efficient revocation of receivers |
US20060195401A1 (en) * | 2002-02-15 | 2006-08-31 | United Parcel Service Of America, Inc. | Systems for selectively enabling and disabling access to software applications over a network and methods for using same |
US7673136B2 (en) * | 2002-02-26 | 2010-03-02 | Stewart Ian A | Method for secure multicast repeating on the public Internet |
AUPS112202A0 (en) * | 2002-03-14 | 2002-04-18 | Commonwealth Scientific And Industrial Research Organisation | Semiconductor manufacture |
US7249264B2 (en) * | 2002-04-02 | 2007-07-24 | International Business Machines Corporation | Secure IP based streaming in a format independent manner |
US7039386B2 (en) * | 2002-04-18 | 2006-05-02 | Lucent Technologies Inc. | Cellular base station broadcast method and system |
KR100483420B1 (en) * | 2002-04-18 | 2005-04-14 | 학교법인고려중앙학원 | Tree organizing method using level-limited technique |
US20040025039A1 (en) * | 2002-04-30 | 2004-02-05 | Adam Kuenzi | Lock box security system with improved communication |
US7061367B2 (en) * | 2002-04-30 | 2006-06-13 | General Electric Company | Managing access to physical assets |
EP1385311B1 (en) * | 2002-07-23 | 2008-05-28 | Matsushita Electric Industrial Co., Ltd. | Terminal apparatus, communication method, and communication system for authentication of users in a user group in a network |
US7783043B1 (en) | 2002-08-05 | 2010-08-24 | Nortel Networks Limited | Secure group communications |
KR100924773B1 (en) * | 2002-09-16 | 2009-11-03 | 삼성전자주식회사 | Method for encrypting and decrypting metadata and method for managing metadata and system thereof |
KR100450763B1 (en) * | 2002-10-04 | 2004-10-01 | 한국전자통신연구원 | Communication system and key reusing method therefor |
KR100449489B1 (en) * | 2002-10-23 | 2004-09-22 | 한국전자통신연구원 | Aaa key refresh mechanism method between mobile ip mobile node and home diameter server |
US7878908B2 (en) * | 2002-11-14 | 2011-02-01 | Nintendo Co., Ltd. | Multiplexed secure video game play distribution |
WO2004049737A2 (en) * | 2002-11-25 | 2004-06-10 | Nokia Corporation | System and method for user-initiated group messaging |
CN100341305C (en) * | 2002-11-26 | 2007-10-03 | 华为技术有限公司 | Protocol 802.1X based multicast control method |
JP4432350B2 (en) * | 2003-04-18 | 2010-03-17 | ソニー株式会社 | Data processing method, program thereof, device thereof and receiving device |
JP4504099B2 (en) * | 2003-06-25 | 2010-07-14 | 株式会社リコー | Digital certificate management system, digital certificate management apparatus, digital certificate management method, update procedure determination method and program |
US20050102513A1 (en) * | 2003-11-10 | 2005-05-12 | Nokia Corporation | Enforcing authorized domains with domain membership vouchers |
US20050129236A1 (en) * | 2003-12-15 | 2005-06-16 | Nokia, Inc. | Apparatus and method for data source authentication for multicast security |
ATE405082T1 (en) * | 2003-12-23 | 2008-08-15 | Motorola Inc | KEY UPDATE IN SECURE MULTICAST COMMUNICATION |
US8209537B2 (en) | 2004-03-30 | 2012-06-26 | Hewlett-Packard Development Company, L.P. | Secure information distribution between nodes (network devices) |
US7487349B2 (en) * | 2004-04-23 | 2009-02-03 | Nagracard S.A. | Method for securing a ciphered content transmitted by a broadcaster |
EP1745587A1 (en) * | 2004-05-12 | 2007-01-24 | Telefonaktiebolaget LM Ericsson (publ) | Key management messages for secure broadcast |
GB0414253D0 (en) * | 2004-06-24 | 2004-07-28 | Ibm | Access control over multicast |
CN100454806C (en) * | 2004-07-29 | 2009-01-21 | 北京航空航天大学 | Safety group broadcast management system and method |
KR100657273B1 (en) * | 2004-08-05 | 2006-12-14 | 삼성전자주식회사 | Rekeying Method in secure Group in case of user-join and Communicating System using the same |
US8594323B2 (en) * | 2004-09-21 | 2013-11-26 | Rockstar Consortium Us Lp | Method and apparatus for generating large numbers of encryption keys |
US8090105B2 (en) * | 2004-11-24 | 2012-01-03 | International Business Machines Corporation | Broadcast encryption with dual tree sizes |
US8255686B1 (en) * | 2004-12-03 | 2012-08-28 | Hewlett-Packard Development Company, L.P. | Securing sensed data communication over a network |
US7434047B2 (en) * | 2004-12-30 | 2008-10-07 | Nokia, Inc. | System, method and computer program product for detecting a rogue member in a multicast group |
GB2423435B (en) * | 2005-02-17 | 2007-07-18 | Motorola Inc | Access control for mobile multicast |
US7813510B2 (en) * | 2005-02-28 | 2010-10-12 | Motorola, Inc | Key management for group communications |
US8135645B2 (en) * | 2005-12-06 | 2012-03-13 | Microsoft Corporation | Key distribution for secure messaging |
KR100772877B1 (en) | 2006-04-25 | 2007-11-02 | 삼성전자주식회사 | Apparatus and method for connecting devices by levels |
EP2036300B1 (en) * | 2006-06-22 | 2019-09-18 | Koninklijke Philips N.V. | Hierarchical and deterministic system and method for predistribution of key pairs |
JP5464794B2 (en) * | 2006-07-24 | 2014-04-09 | コニカミノルタ株式会社 | Network management method and network management system |
CN101495030B (en) | 2006-07-28 | 2012-12-12 | 皇家飞利浦电子股份有限公司 | Automatic transfer and identification of monitored data with hierarchical key management infrastructure |
CN101150394B (en) * | 2006-09-22 | 2010-05-12 | 中国科学院声学研究所 | User end extension method for subset difference/layered subset difference mechanism |
CN100463391C (en) | 2006-09-23 | 2009-02-18 | 西安西电捷通无线网络通信有限公司 | Network key management and session key updating method |
KR101223499B1 (en) * | 2006-09-27 | 2013-01-18 | 삼성전자주식회사 | Method of updating group key and group key update device using the same |
CN101237257B (en) * | 2006-10-02 | 2013-06-19 | 赛乐得公司 | Method and system for improving client server transmission over fading channel |
CN101179845B (en) * | 2006-11-08 | 2011-02-02 | 华为技术有限公司 | Key management method and system between local proxy and foreign proxy |
US8059819B2 (en) * | 2007-01-17 | 2011-11-15 | Panasonic Electric Works Co., Ltd. | Systems and methods for distributing updates for a key at a maximum rekey rate |
US7840810B2 (en) * | 2007-01-18 | 2010-11-23 | Panasonic Electric Works Co., Ltd. | Systems and methods for rejoining a second group of nodes with a first group of nodes using a shared group key |
US8588420B2 (en) * | 2007-01-18 | 2013-11-19 | Panasonic Corporation | Systems and methods for determining a time delay for sending a key update request |
KR101362529B1 (en) * | 2007-03-27 | 2014-02-14 | 재단법인서울대학교산학협력재단 | Method and system for distributing and redistributing secret |
US9670694B2 (en) * | 2007-04-12 | 2017-06-06 | Utc Fire & Security Americas Corporation, Inc. | Restricted range lockbox, access device and methods |
US8010809B1 (en) | 2007-06-22 | 2011-08-30 | Qlogic, Corporation | Method and system for securing network data |
JP4843634B2 (en) * | 2007-10-02 | 2011-12-21 | 日本電信電話株式会社 | Information recording medium security method, information processing apparatus, program, and recording medium |
CN101304312B (en) * | 2008-06-26 | 2011-07-20 | 复旦大学 | Ciphering unit being suitable for compacting instruction set processor |
US20100153709A1 (en) * | 2008-12-10 | 2010-06-17 | Qualcomm Incorporated | Trust Establishment From Forward Link Only To Non-Forward Link Only Devices |
EP2371082A1 (en) * | 2008-12-23 | 2011-10-05 | Telefonaktiebolaget LM Ericsson (publ) | A key management method |
US8483394B2 (en) | 2010-06-15 | 2013-07-09 | Los Alamos National Security, Llc | Secure multi-party communication with quantum key distribution managed by trusted authority |
US9002009B2 (en) | 2010-06-15 | 2015-04-07 | Los Alamos National Security, Llc | Quantum key distribution using card, base station and trusted authority |
CN102255983B (en) * | 2011-07-26 | 2014-03-05 | 中国科学院计算机网络信息中心 | Entity identifier allocation system, source tracing and authentication methods and server |
US9509505B2 (en) * | 2011-09-28 | 2016-11-29 | Netapp, Inc. | Group management of authenticated entities |
US9287994B2 (en) | 2011-09-30 | 2016-03-15 | Los Alamos National Security, Llc | Great circle solution to polarization-based quantum communication (QC) in optical fiber |
US9509506B2 (en) | 2011-09-30 | 2016-11-29 | Los Alamos National Security, Llc | Quantum key management |
WO2013048671A1 (en) | 2011-09-30 | 2013-04-04 | Los Alamos National Security, Llc | Polarization tracking system for free-space optical communication, including quantum communication |
US8625805B1 (en) | 2012-07-16 | 2014-01-07 | Wickr Inc. | Digital security bubble |
US9819418B2 (en) | 2012-08-17 | 2017-11-14 | Los Alamos National Security, Llc | Quantum communications system with integrated photonic devices |
US10129260B1 (en) | 2013-06-25 | 2018-11-13 | Wickr Inc. | Mutual privacy management |
US9866591B1 (en) | 2013-06-25 | 2018-01-09 | Wickr Inc. | Enterprise messaging platform |
US10567349B2 (en) | 2013-06-25 | 2020-02-18 | Wickr Inc. | Secure time-to-live |
US9830089B1 (en) | 2013-06-25 | 2017-11-28 | Wickr Inc. | Digital data sanitization |
US9698976B1 (en) | 2014-02-24 | 2017-07-04 | Wickr Inc. | Key management and dynamic perfect forward secrecy |
US9584530B1 (en) | 2014-06-27 | 2017-02-28 | Wickr Inc. | In-band identity verification and man-in-the-middle defense |
US9654288B1 (en) | 2014-12-11 | 2017-05-16 | Wickr Inc. | Securing group communications |
US9852551B2 (en) | 2015-02-05 | 2017-12-26 | Uber Technologies, Inc. | Programmatically determining location information in connection with a transport service |
US10204528B2 (en) | 2015-08-05 | 2019-02-12 | Uber Technologies, Inc. | Augmenting transport services using driver profiling |
CN106302312B (en) | 2015-05-13 | 2019-09-17 | 阿里巴巴集团控股有限公司 | Obtain the method and device of electronic document |
CN106326763B (en) | 2015-06-15 | 2020-01-14 | 阿里巴巴集团控股有限公司 | Method and device for acquiring electronic file |
US10033703B1 (en) | 2015-06-16 | 2018-07-24 | Amazon Technologies, Inc. | Pluggable cipher suite negotiation |
US9973481B1 (en) * | 2015-06-16 | 2018-05-15 | Amazon Technologies, Inc. | Envelope-based encryption method |
US9584493B1 (en) | 2015-12-18 | 2017-02-28 | Wickr Inc. | Decentralized authoritative messaging |
US10291607B1 (en) | 2016-02-02 | 2019-05-14 | Wickr Inc. | Providing real-time events to applications |
US9596079B1 (en) | 2016-04-14 | 2017-03-14 | Wickr Inc. | Secure telecommunications |
US9590958B1 (en) | 2016-04-14 | 2017-03-07 | Wickr Inc. | Secure file transfer |
US10672198B2 (en) | 2016-06-14 | 2020-06-02 | Uber Technologies, Inc. | Trip termination determination for on-demand transport |
US10129221B1 (en) * | 2016-07-05 | 2018-11-13 | Uber Technologies, Inc. | Transport facilitation system implementing dual content encryption |
KR102603069B1 (en) * | 2016-11-19 | 2023-11-15 | 디피니티 스티프텅 | System architecture and data processing methods in system architecture |
US10371542B2 (en) | 2017-02-17 | 2019-08-06 | Uber Technologies, Inc. | System and methods for performing multivariate optimizations based on location data |
US10445950B1 (en) | 2017-03-27 | 2019-10-15 | Uber Technologies, Inc. | Vehicle monitoring system |
US10402771B1 (en) | 2017-03-27 | 2019-09-03 | Uber Technologies, Inc. | System and method for evaluating drivers using sensor data from mobile computing devices |
US10855440B1 (en) | 2017-11-08 | 2020-12-01 | Wickr Inc. | Generating new encryption keys during a secure communication session |
US11101999B2 (en) | 2017-11-08 | 2021-08-24 | Amazon Technologies, Inc. | Two-way handshake for key establishment for secure communications |
US10778432B2 (en) | 2017-11-08 | 2020-09-15 | Wickr Inc. | End-to-end encryption during a secure communication session |
US10541814B2 (en) | 2017-11-08 | 2020-01-21 | Wickr Inc. | End-to-end encryption during a secure communication session |
US11494517B2 (en) | 2020-02-12 | 2022-11-08 | Uber Technologies, Inc. | Computer system and device for controlling use of secure media recordings |
US11489821B2 (en) | 2020-02-26 | 2022-11-01 | International Business Machines Corporation | Processing a request to initiate a secure data transfer in a computing environment |
US11405215B2 (en) | 2020-02-26 | 2022-08-02 | International Business Machines Corporation | Generation of a secure key exchange authentication response in a computing environment |
US11502834B2 (en) | 2020-02-26 | 2022-11-15 | International Business Machines Corporation | Refreshing keys in a computing environment that provides secure data transfer |
US11184160B2 (en) | 2020-02-26 | 2021-11-23 | International Business Machines Corporation | Channel key loading in a computing environment |
US11546137B2 (en) | 2020-02-26 | 2023-01-03 | International Business Machines Corporation | Generation of a request to initiate a secure data transfer in a computing environment |
US11652616B2 (en) * | 2020-02-26 | 2023-05-16 | International Business Machines Corporation | Initializing a local key manager for providing secure data transfer in a computing environment |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5592552A (en) * | 1993-08-25 | 1997-01-07 | Algorithmic Research Ltd. | Broadcast encryption |
US5748736A (en) * | 1996-06-14 | 1998-05-05 | Mittra; Suvo | System and method for secure group communications via multicast or broadcast |
US5831975A (en) * | 1996-04-04 | 1998-11-03 | Lucent Technologies Inc. | System and method for hierarchical multicast routing in ATM networks |
-
1999
- 1999-09-22 US US09/401,450 patent/US6263435B1/en not_active Ceased
-
2000
- 2000-07-06 WO PCT/US2000/018529 patent/WO2001003364A1/en not_active Application Discontinuation
- 2000-07-06 JP JP2001508106A patent/JP2003503949A/en active Pending
- 2000-07-06 EP EP00945202A patent/EP1198920A4/en not_active Withdrawn
- 2000-07-06 KR KR10-2002-7000206A patent/KR100495539B1/en not_active IP Right Cessation
- 2000-07-06 CN CNB008099189A patent/CN1160897C/en not_active Expired - Fee Related
-
2006
- 2006-02-24 US US11/332,880 patent/USRE40708E1/en not_active Expired - Lifetime
Patent Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5592552A (en) * | 1993-08-25 | 1997-01-07 | Algorithmic Research Ltd. | Broadcast encryption |
US5831975A (en) * | 1996-04-04 | 1998-11-03 | Lucent Technologies Inc. | System and method for hierarchical multicast routing in ATM networks |
US5748736A (en) * | 1996-06-14 | 1998-05-05 | Mittra; Suvo | System and method for secure group communications via multicast or broadcast |
Non-Patent Citations (5)
Title |
---|
"Comparison of Scalable Key Distribution Schemes for Secure Group Communication" (Dondeti et al., 1999, IEEE, all). * |
"Dual Encryption Protocol for Scalable Secure Multicasting" (Dondeti et al., 1999, IEEE, all). * |
"Tracing Traitors" (Chor et al., May 2000, IEEE Tranactions on Information Theory, all). * |
Dondeti et al, "A Dual Encryption Protocol for Scalable Secure Multicasting", University of Nebraska-Lincoln Department of Computer Science and Engineering Report Series: UNL-CSE-1998-001, Jul. 1998. |
Dondeti et al, "Dual Encryption Protocol for Scalable Secure Multicasting", IEEE International Symposium on Computers and Communications, Jul. 6-8, 1999. |
Cited By (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7848526B2 (en) * | 2004-11-18 | 2010-12-07 | Samsung Electronics Co., Ltd. | Method of receiving session key in home network and method of reproducing content using the same |
US20060107051A1 (en) * | 2004-11-18 | 2006-05-18 | Samsung Electronics Co., Ltd. | Method of receiving session key in home network and method of reproducing content using the same |
US20080253391A1 (en) * | 2007-04-10 | 2008-10-16 | Alexander Krits | Protocol Negotiation for a Group Communication System |
US7701970B2 (en) * | 2007-04-10 | 2010-04-20 | International Business Machines Corporation | Protocol negotiation for a group communication system |
US20090113559A1 (en) * | 2007-10-26 | 2009-04-30 | Red Hat, Inc. | Stateless challenge-response protocol |
US8112629B2 (en) | 2007-10-26 | 2012-02-07 | Red Hat, Inc. | Stateless challenge-response protocol |
US8291103B1 (en) * | 2007-11-29 | 2012-10-16 | Arris Solutions, Inc. | Method and system for streaming multimedia transmissions |
US20100023752A1 (en) * | 2007-12-27 | 2010-01-28 | Motorola, Inc. | Method and device for transmitting groupcast data in a wireless mesh communication network |
US20090217386A1 (en) * | 2008-02-27 | 2009-08-27 | James Paul Schneider | Stateless challenge-response broadcast protocol |
US8646104B2 (en) * | 2008-02-27 | 2014-02-04 | Red Hat, Inc. | Stateless challenge-response broadcast protocol |
US20110026714A1 (en) * | 2009-07-29 | 2011-02-03 | Motorola, Inc. | Methods and device for secure transfer of symmetric encryption keys |
US8509448B2 (en) * | 2009-07-29 | 2013-08-13 | Motorola Solutions, Inc. | Methods and device for secure transfer of symmetric encryption keys |
US8793766B2 (en) | 2012-03-13 | 2014-07-29 | International Business Machines Corporation | Method and apparatus for security-aware elasticity of application and services |
Also Published As
Publication number | Publication date |
---|---|
CN1359574A (en) | 2002-07-17 |
EP1198920A4 (en) | 2003-04-16 |
KR20020040741A (en) | 2002-05-30 |
KR100495539B1 (en) | 2005-06-16 |
WO2001003364A1 (en) | 2001-01-11 |
US6263435B1 (en) | 2001-07-17 |
WO2001003364A8 (en) | 2001-05-17 |
EP1198920A1 (en) | 2002-04-24 |
CN1160897C (en) | 2004-08-04 |
JP2003503949A (en) | 2003-01-28 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
USRE40708E1 (en) | Dual encryption protocol for scalable secure group communication | |
Dondeti et al. | A dual encryption protocol for scalable secure multicasting | |
KR100495540B1 (en) | Distributed group key management scheme for secure many-to-many communication | |
Dondeti et al. | Scalable secure one-to-many group communication using dual encryption | |
US6049878A (en) | Efficient, secure multicasting with global knowledge | |
Mittra | Iolus: A framework for scalable secure multicasting | |
US6584566B1 (en) | Distributed group key management for multicast security | |
Judge et al. | Gothic: A group access control architecture for secure multicast and anycast | |
Ballardie | Scalable multicast key distribution | |
US7181614B1 (en) | Method and arrangement in a communication network | |
US7328343B2 (en) | Method and apparatus for hybrid group key management | |
US5748736A (en) | System and method for secure group communications via multicast or broadcast | |
US7434046B1 (en) | Method and apparatus providing secure multicast group communication | |
US6785809B1 (en) | Server group key for distributed group key management | |
Dondeti et al. | Survey and comparison of secure group communication protocols | |
Rafaeli | A decentralized architecture for group key management | |
Alphonse et al. | A method for obtaining authenticated scalable and efficient group key agreement for wireless ad-hoc networks | |
Dondeti | Efficient private group communication over public networks | |
Padmavathi et al. | A security framework for Content-Based Publish–Subscribe system | |
Baddi et al. | Key management for secure multicast communication: A survey | |
Mukherjee | A Dual Encryption Protocol for Scalable Secure Multicasting | |
Aye et al. | Key management for secure multicast over IPv6 wireless networks | |
Varshney | A study of group key management protection in non? network | |
Rituraj | A study of Group Key Management Protection in Non-Network | |
Challal | Group communication security |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
FEPP | Fee payment procedure |
Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
FEPP | Fee payment procedure |
Free format text: PAYER NUMBER DE-ASSIGNED (ORIGINAL EVENT CODE: RMPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY Free format text: PAYOR NUMBER ASSIGNED (ORIGINAL EVENT CODE: ASPN); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY |
|
FPAY | Fee payment |
Year of fee payment: 12 |