應用於P2P多點會議環境下的金鑰管理機制研究

A Mechanism Research of Session Key Management for Conference Multicasting Environment on the P2P-SIP Network

何偉聖(Wei-Sheng Ho)

指導教授 ： 陳景章

國立中正大學/工學院/通訊工程學系/碩士(2013年)

摘要

P2P-SIP 多媒體會議是透過網路中的使用者彼此分享會議資源，藉此改善傳統集中式的會議模型架構下的部分問題，諸如負載集中、單點失效和昂貴的基礎建設成本等，使服務業者可以藉此有效達到去集中化的效益；由於服務元件並非如傳統的集中式架構均由業者所提供，所以在資料傳輸時的安全性和隱密性也就降低許多。
藉由上述原因，本篇論文主要提出了基於P2PSIP網路會議通訊時的金鑰管理機制，其主要目的在於，我們希望能基於會議所建立的既有群播樹，來設計一套金鑰管理機制，在不改變舊有的P2P環境架構下，仍然使通話服務具有一定的隱密性及通訊安全性，當使用者使用網路通訊服務時，除了應定期更換基礎的公鑰、私鑰加密資訊外，基於前向性及後向性安全的議題，也將於會議的通訊過程中，依照使用者的加入、離開，來更換通訊所需的共同加密金鑰。此外，我們也希望能夠透過縮短金鑰更新換發的整體時間，來進一步提高系統的效能以及降低資料外洩的可能性。

關鍵字

對點對會議初始協定 ； 多媒體會議 ； 金鑰管理 ； 應用層群播

並列摘要

The P2P-SIP multimedia conferencing concept is to let users to share conference resources through a network to improve the the problems that traditional model of centralized architectures meeting, such as high loading at centralized component, single point of failure and expensive infrastructure costs. By using the p2p model, the service industry can achieve the benefits of decentralization effectively. But, owing to the service component is not provided by the industry as traditional centralized architecture, so the data transmission security and privacy will not as good as before.
By these reasons, this paper proposes a key management scheme based on P2PSIP multimedia conferencing communication. The main purpose is, we hope to design a key management scheme upon the established application multicast tree. Without changing the structure of the P2P environment, it is still has some privacy and communications security.
When user uses Internet communication services, it should not only change the public and private key encryption information period, but also based on the forward and backward security issues. In other words, the meeting will process the communication encryption key during the conference period, according to the user join and leave behavior. In addition, we also hope that through reduced the overall time of rekeying to further improve system performance and reduce the possibility of the important data disclosed.

並列關鍵字

Peer-to-peer Session Initiation Protocol ； Multimedia conferencing ； Key management ； Application layer multicast

參考文獻

[2]J. F. Wauthy and L. Schumacher, "Implementation and Performance Evaluation of a P2PSIP Distributed Proxy/Registrar," in International Conference on Next Generation Mobile Applications, Services and Technologies, 2007, pp. 119-124.

[3]I. Baumgart, "P2PNS: A Secure Distributed Name Service for P2PSIP," in International Conference on Pervasive Computing and Communications, 2008, pp. 480-485.

[5]Bryan, D. A., Lowekamp, B. B. and Jennings, C., "SOSIMPLE: A Serverless, Standards-based, P2P SIP Communication System," in International Workshop on Advanced Architectures and Algorithms for Internet Delivery and Applications, 2005, pp. 42-49.

[7]R. Klauck and M. Kirsche, "Integrating P2PSIP into collaborative P2P applications: A case study with the P2P videoconferencing system BRAVIS," in 5th International Conference on Collaborative Computing: Networking, Applications and Worksharing, 2009, pp. 1-10.

[15]Rosenberg, J., "A Framework for Conferencing with the Session Initiation Protocol (SIP)", RFC 4353, February 2006.