摘要： 在介绍IPv6源指定组播SSM的原理和特点的基础上,分析了其开放性和动态性特点引起的安全性的需求问题。参考IETF的MSEC组的群密钥管理GDOI框架结构,结合SGKDS密钥树算法,针对IPv6SSM组播的安全性需求提出了群密钥管理的安全解决方案,讨论了该方案的安全性,最后详细描述了方案的设计实现。

关键词: IPv6, SSM组播, 安全, 群密钥管理

Abstract: Based on the introduction of the basic theories and characters of IPv6 source-specific multicast (SSM), this paper analyzes the security problems caused by the open and dynamic characters of IPv6 SSM. Consulting the GDOI framework presented by the MSEC group of IETF, using the SGKDS key tree algorithm, it presents a security scheme for the security requirements of IPv6 SSM multicast using group key management, then discusses the scheme’s security, and at last describes the design and realization of the scheme in details.

中图分类号: 

• TP393.08