在UPnP網路上建構安全階層之設計與實作

Design and Implementation of Secure Layer over UPnP Networks

徐嘉偉(Chai-Wei Hsu)

指導教授 ： 雷欽隆

國立臺灣大學/電機資訊學院/電機工程學研究所/碩士(2007年)

https://doi.org/10.6342/NTU.2007.02462

摘要

UPnP是一個重要的個人與家庭網路系統協定，它提供了像是自動偵測、自動系統配置等重要的功能。它的設計也達到一些重要的特性，包括容易使用、有彈性的系統架構、基於標準的協定。然而，當我們想要試圖建構一個安全的大型資訊信息系統時，安全的通訊管道這個重要的特性是UPnP無法提供的。於是我們基於UPnP的架構，整合了密鑰管理機制，建構了安全的通訊頻道。在此篇論文中，我們成功地擴展與整合了UPnP的技術與密鑰管理機制，並建立了一個智慧型安全網路。我們所提出的系統架構與協定適合用來架構一個有彈性而且容易使用的安全資訊信息系統。

關鍵字

UPnP ； 自動偵測 ； 自動系統配置 ； 安全通訊管道 ； 群組密鑰管理

並列摘要

UPnP is an outstanding standard for automatic-discovery, zero-configuration personal or home network, and it is designed to achieve several important features such as easy-to-use, flexible, standards-based. However, when we attempt to construct a secure large-scale information system, the secure communication channels of the system is required, but this significant feature is not provided by UPnP. Based on the UPnP architecture, to construct secure communication channels, we introduce key management mechanisms into the system. In this thesis, we successfully extend the UPnP technologies with key management mechanism and build an intelligent secure network. Our proposed protocol is suitable to construct a flexible and easy-to-use secure information system.

並列關鍵字

UPnP ； automatic-discovery ； zero-configuration ； secure communication channels ； group key management

參考文獻

[2] J. Allard, V. Chinta, S. Gundala, G.-G. Richard III. “Jini Meets UPnP: An Architecture for Jini/UPnP Interoperability,” in IEEE Proceedings of the 2003 Symposium on Applications and the Internet, pp. 268-275, 2003.

[4] D.-O. Kang, K. Kang, S. Choi, J. Lee. “UPnP AV Architectural Multimedia System with a Home Gateway Powered by the OSGi Platform,” in IEEE Transactions on Consumer Electronics, Vol. 51, No. 1, pp. 87-93, Feb. 2005.

[5] D.-S. Kim, J.-M. Lee, W.-H. Kwon, and I.-K. Yuh, “Design and implementation of home network systems using UPnP middleware for networked appliances,” in IEEE Transactions on Con- sumer Electronics, pp.963–972, 2002.

[7] J.-J. Lee, C.-Y. Huang, and C.-L. Lei. “Design and Implementation of Secure Communication Channels over UPnP Networks,” in MUE’07: International Conference on Multimedia and Ubiquitous Engineering, pp. 307-312, 2007.

[9] R. Molva and A. Pannetrat. “Scalable multicast security with dynamic recipient groups,” in ACM Transactions on Information and System Security, 3(3):pp. 136-160, 2000.