摘要： 指出了现有组播协议存在的安全性问题，提出了一种简单的基于主机/用户认证方法来提高组播服务的安全性，并在此基础上提出了基于策略的安全组播体系结构，给出了该结构下的两个主要功能模块和它们之间需要交互的消息，并阐明这种体系结构对于在城域网范围内开展有偿组播服务的重要意义。
关键词:
组播安全,
策略服务器,
组播敏感,
第二层交换机
Abstract: As link speed and device throughput are increasing rapidly in recent years, broadband service such as video-on-demand and remote education run all the way to commercialization. But the open characteristics of current multicast mechanism provide no means to ensure data secrecy and integrity. This paper introduces a method to enhance multicast security and explains that application level authentication is not enough to ensure multicast security. Then it presents the policy-based secure multicast architecture. The two building blocks are introduced in detail, together with the messages exchanged between them. It further explains that the scheme is flexible and scalable.
中图分类号:
孙卫强,胡军强,李津生,洪佩琳. 基于策略的安全组播体系结构[J]. , 2002, 28(12): 57-59.
SUN Weiqiang，HU Junqiang，LI Jinsheng，HONG Peilin, EEIS, University of Science and Technology of China,Hefei 230026). A Secure Multicast Architecture Based on Policy[J]. , 2002, 28(12): 57-59.