Design of secure group key management system

Jeong-Min Lee; Kyo-Cheul Hwang; Kyoon-Ha Lee

doi:10.1117/12.434435

26 July 2001 Design of secure group key management system

Jeong-Min Lee, Kyo-Cheul Hwang, Kyoon-Ha Lee

Proceedings Volume 4527, Technologies, Protocols, and Services for Next-Generation Internet; (2001) https://doi.org/10.1117/12.434435
Event: ITCom 2001: International Symposium on the Convergence of IT and Communications, 2001, Denver, CO, United States

Abstract

Needs of Information Security in Multicast is increased. As clients join or leave a specific service group, Backward and Forward Secrecy problem occurred. Solving this problem, service group will make a re-key operation periodically. But because of this operation need translation frequently so it may have a bad influence to Real time property, which needs minimum bandwidth requirement. In this paper, we proposed a Group Key Management System, which is comprised of two levels, KD (Key Distributor) subsystem and subgroup, for managing encryption key. A KD (Key Distributor) subsystem is composed of SKDs (Subgroup Key Distributor) and TKD (Top-level Key Distributor). A SKD manages a encryption key of a subgroup. A TKD generates a KD group key that is a encryption key used in a KD group and transmits it to SKDs with safety. Subgroup consists of hosts in Multicast group. Hosts and a SKD share a encryption key, a subgroup key. This key is generated by a SKD and cannot be disclosed outside of the subgroup. As a result, a load of key management can be distributed into many KD so that the overhead of key translation can be decreased, which is needed at each stage of Multicast traffic. In joining and leaving a Multicast group frequently, a group key is distributed only in a specific subgroup. Therefore the overhead needed to redistribute a key can be decreased. By reducing overhead from security service, we expect to satisfy real time property.

Citation Download Citation

Jeong-Min Lee, Kyo-Cheul Hwang, and Kyoon-Ha Lee "Design of secure group key management system", Proc. SPIE 4527, Technologies, Protocols, and Services for Next-Generation Internet, (26 July 2001); https://doi.org/10.1117/12.434435

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available