The Research Of IPv6 Secure Multicast Based On SIP

IP multicast is one of the network technologies that have been given much attention over the years. For one-to-many and many-to-many communication, IP multicast enables routers to duplicate packets only when necessary, which can efficiently save network bandwidth. However, IP multicast has not been widely deployed in the Internet currently. What leads to this is that IP multicast technology lacks security control while providing simplicity and openness: users can join a multicast group and can send data to a group at will, which makes it hardly useful in commercial environment.So, multicast security gains a lot of research. IETF secret multicast work group has proposed a secret multicast model in RFC3740, which divided multicast security issues into three parts: multicast security policies, group key management and multicast data handling. Besides, multicast service must provide auditing and accounting functions, and can support mobile users.Given that core networks usually are controlled by network providers and users get services through access networks, it will magnificently improve multicast security to introduce security schemes at the edge of core networks and in the access networks to control users'access. And the core networks need no change at all. In this paper a new secure multicast scheme under IPv6 is proposed: the Multicast Security based on Session Initiation Protocol (MSSIP), which uses SIP as signaling protocol to accomplish multicast source and receiver access control, source authentication and group key management. SIP supports session parameters exchange at the beginning of a session, and provides HTTP authentication mechanism for authentication of user's identity and S/MIME to ensure both integrity and confidentiality. Through interface modules, MSSIP has good openness: different group key management system and different multicast security policies management system are adoptable to the system. Scaleability is one of the most important objectives of the system research. Besides the high scaleability of deployment, the system provides three more expanding methods: MCS cluster, physical division and logical division.