The Research And Implementation Of Internet Group Management Security

Multicast can send data to many receive in one time, this can saving a lot of bandwidth, with this character the multicast is wide used. At same time, multicast face with many kind of security problem, and those problems is extensive focused.This article analyzes the theory and mechanism of multicast, and gives an summary to multicast security problem. At present, the multicast protocol manage the group in a slack way, this can cause serious security problem, so security IGMP is a important aspect of multicast security. This article analyzes the main method of security IGMP: IGMPv3 and IGAP, and give it shortcomings. At last present a security IGMP method: SIGMP (Security Internet Group Management Protocol).SIGMP use the view of "peer group" to think about the problem of group management, Intend to manage every member of the group, and filter illegal data in network layer, achieve a "closed group". SIGMP use "coordinator election mechanism " to elect the manager of group, use "consistency mechanism" to maintain the consistent of member list, use user authentication mechanism to authenticate the group member, and authorize the ability of send and receive group manage information. With those mechanism SIGMP maintain a correct member list for all the member of multicast group, use the member list a member can filter illegal packet in network layer.This article analyze the validity of the SIGMP with Formal Method, and realized the SIGMP, this article also give the main structure, Data Flow Diagram and packet format of the implementation. The implementation makes clear that the research of this article is effective, and the design is feasible.At the end of article make a conclusion and point out the improve aspect in feature.