AuthoCast—a mobility‐compliant protocol framework for multicast sender authentication

Abstract

Mobility is considered a key technology of the next generation Internet and has been standardized within the IETF. Rapidly emerging multimedia group applications such as IPTV, massive mutliplayer games (MMORPGs) and video conferencing increase the demand for mobile group communication, but a standard design of mobile multicast is still awaited. The open problem poses significant operational and security challenges to the Internet infrastructure. This paper introduces a protocol framework for authenticating multicast sources (MSs) and securing their mobility handovers. Its contribution is twofold: at first, the current mobile multicast problem and solution spaces are summarized from the security perspective. At second, a solution to the mobile source authentication problem is presented that complies to IPv6 mobility signaling standards. Using an autonomously verifiable oneway authentication based on cryptographically generated addresses, a common design is derived to jointly comply with the mobile any source and source specific multicast (SSM) protocols that are currently proposed. This lightweight scheme smoothly extends the unicast enhanced route optimization for mobile IPv6 and adds only little overhead to multicast packets and protocol operations.Voice and video (group) conferencing, as well as large scale content distribution, e.g., IPTV or massive mutliplayer games (MMORPGs) are considered the key applications for the next generation ubiquitous Internet. Inexpensive, point-to-multipoint enabled technologies such as 802.16 or DVB-H/IPDC emerge on the subnetwork layer and facilitate large-scale group communication deployment. Unlike point-to-point mobility and despite of 10 years of active research, mobile

Fast adaptive routing supporting mobile senders in Source Specific Multicast

“…Updates bear the common risks of impersonation and theft of service in performing redirects on a global scale, and hence require a cryptographically strong authentication. The corresponding security issues are common to all approaches for mobile multicast sources, and have been recently combined in a joint approach called AuthoCast [23].…”

“…Following a sequence identifier, routers will process updates only once. For a detailed discussion on security aspects and overheads we refer to [23].…”

Connecting the worlds: Multipoint videoconferencing integrating H.323 and IPv4, SIP and IPv6 with autonomous sender authentication

“…Details can be found in [20] and are omitted here for the sake of brevity. Note that for this 'AuthoCast' group authentication scheme a native implementation for IPv6 exists based on standard protocol elements [21].…”

Multicast Mobility in Mobile IP Version 6 (MIPv6): Problem Statement and Brief Survey

“…Due to lack of feedback, the admission [85] and binding updates [86] of mobile multicast sources require autonomously verifiable authentication. This can be achieved by, for instance, Cryptographically Generated Addresses (CGAs).…”