CERNET2 Secure Multicast Key Management System Research And Implementation Of Migration From IPv4 To IPv6

Multicast suffers from the similar security threats like unicast transmissions, however, the security mechanisms in unicast can not be directly applied to multicast in the same situation, secure multicast, which supplies multicast with security mechanisms is becoming a hot research spot on network. Some achievement of research bring out a secure solution of mulitcast which is integrated with the standard of unicast security solution IPSec and discusses the problems of compatibility between secure multicast and IPSec and other achievement show us a way of secure multicast based on SIP. By the mechanism of authentication, S/MIME and session parameters negotiation supported by SIP, multicast sender and receiver access control, source authentication and secure communication are acquired. This method has the advantages of high-degree security, stable operation and good performance of expansion for group member, and it can be easily transferred to work in IPv6.The using of secure multicase will be very important in IPv6.This thesis begins with an introduction of multicast techniques, the security requirements and framework of multicast security.And then, it introduced the status of secure multicast. We also classified existing multicast management schemes. Among which, several typical schemes are compared and analyzed, and the problems in exiting schemes is also given.And then, we discuss the complexion of IPv6 major safety multicast system and the achievement of system of secure multicast for CERNET2. Then, it introduced the multicast transition technique base on gateway of IPv4-IPv6, protocol comparation of IPv4 & IPv6 and its configuration and testing in Windows XP. And then, this thesis introduce the design and development of a security multicast system in IPv6. And it also includes the analysis and conclusion of the system.In addition, with this task, this thesis discusses a new multicast key managelment schemes based on hierarchy and it is used for large dynamic multicast. Its design principles, architecture and key updating algorithms are also given. The schemes are compared with several related existing schemes, the schemes are evaluated using the following four metrics: key storage, encryption complexity, communication costs and protection against attacks.