[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Group-oriented Key Management (GKMP) protocol



There's an interesting proposal for a study at ORNL about
key management for multicast applications.  Unfortunately,
the ietf drafts on the protocol itself have expired :-),
but there are a couple of Postscript papers pointed to by
Tom Dunigan's really extensive reference list
        http://www.epm.ornl.gov/~dunigan/security.html

The ORNL proposal is at http://www.epm.ornl.gov/~sgb/mvpnet.html

ABSTRACT
This proposal focuses on providing security in a multicast-based network
such as the mbone. The proposed solution is application-based and works 
with all IP-multicast based routing protocols. It utilizes the group-oriented 
key management (GKMP) protocol which provides greater scaleability by removing
the need for a separate key distribution center. Secondly, we look at ways 
of securing IP multicast from denial of service attacks.
......
The first step in implementing a secure multicast capability is the ability 
to provide group access control and a scaleable efficient key distribution
meshanism.
We propose implementing the Group-oriented Key Management (GKMP) protocol as the
core of our group access scheme. GKMP currently only exists as a beta version 
at SPARTA. GKMP has become an experimental RFC and the code will be made
publicly
available by SPARTA. 


#					Thanks;  Bill
# Bill Stewart, [email protected], +1-415-442-2215
# goodtimes signature virus innoculation