Security Management Of Multicast Users Under The ACR Framework

With the development of network and multimedia technology ,the broad band operation of next generation must be the representation of massive and concurrent broad band streaming media of network streaming media operation. In order to implement this kind of operation in 3Tnet science and technology ministry start the important expert researching of 863 information field in communication topic—the System Capability and Key Technology of Access Convergent Router .Appliance of IP multicast would efficiently save network bandwidth and reduce the load of network because that the data of streaming media is very big .Technology of IP multicast is the first selection for distribution of streaming media in ACR.Based on the needs of commercial operation, streaming media distribution in the ACR system must be manageable, operated and controlled. But the inherent openness of IP multicast technology make it very weak in the security management and commercial operation. Therefore, the National Digital Switching System Engineering & Technology Research Center established a special study group about" The security research of ACR support TV over IP consistent with the business model" (The author participated in the research ).The research goal is to resolve the problem of the massive streaming media distributed security management under the ACR framework, and to meet the demand of commercial operation about efficient authentication, authorization, accounting and access control based on users.Aiming at solving the problem that several existing secure Internet Group Membership Management scheme can not satisfy our demand that realizing secure group membership management based on users in condition that routers have light burdens ,our team bring forward a new kind of group membership management system fitting ACR framework—Ternary Communicating Management Framework and prove it with formal analysis.The article analyses the existing two kinds of AAA protocol(RADIUS and DIAMETER) and compares them with each other .The analysis and comparing indicate that DIAMETER is better than RADIUS in aspect of security and expansibility .Therefore DIAMETER is fitting for appliance of ACR.Aiming at fitting the ACR framework ,the article improves the message type of IGMP protocol and DIAMETER protocol based on Ternary Communicating Management Framework ,brings forward two bran-new mode of Authentication and Authorization :The Dividual Mode and The Whole Mode ,which realize the Authentication and Authorization based on users efficiently.