Secure multicast groups on ad hoc networks

ABSTRACT

In this paper we address the problem of secure multicast of data streams over a multihop wireless ad hoc network. We propose a dynamic multicast group management protocol that aims at solving problems that are specific to ad hoc networks such as mobility, unreliable links, and cost of multihop communication. The main idea is to have group members actively participate to the security of the multicast group, therefore reducing the communication and computation load on the source. Since the group security is distributed among the group members, we propose a service right certificate, to verify that a node is authorized to join the group, and also a corresponding revocation mechanism. We simulated our protocol within the ns-2 environment under various mobility, group size, and group dynamic scenarios. Our simulation results indicate that the communication cost and join delay of the protocol scale well when the group dynamic and nodes mobility increase. We have implemented the basic protocol in our ad hoc network testbed. We also proposed an extension to the basic secure multicast tree using multi-link capability combined with a k-out-of-N coding approach.

REFERENCES

• 1: Chung Kei Wong , Mohamed Gouda , Simon S. Lam, Secure group communications using key graphs, Proceedings of the ACM SIGCOMM '98 conference on Applications, technologies, architectures, and protocols for computer communication, p.68-79, August 31-September 04, 1998, Vancouver, British Columbia, Canada
• 2: Guevara Noubir, "Optimizing Multicast Security over Satellite Links". 1998, European Space Agency.
• 3: Guevara Noubir and L. V. Allmen. "Security Issues in Internet Protocols over Satellite Links". in Proceedings of IEEE Vehicular Technology Conference (VTC'99 Fall). 1999. Amsterdam, Holland.
• 4: Guevara Noubir, Feng Zhu, and A. H. Chan. "Key Management for Simultaneous Join/Leave in Secure Multicast". in Proceedings of IEEE International Symposium on Information Theory (ISIT). 2002.
• 5: Refik Molva , Alain Pannetrat, Scalable multicast security with dynamic recipient groups, ACM Transactions on Information and System Security (TISSEC), v.3 n.3, p.136-160, Aug. 2000 [doi>10.1145/357830.357834]
• 6: Suvo Mittra, Iolus: a framework for scalable secure multicasting, Proceedings of the ACM SIGCOMM '97 conference on Applications, technologies, architectures, and protocols for computer communication, p.277-288, September 14-18, 1997, Cannes, France
• 7: Ran Canetti, et al. "Multicast Security: A Taxonomy and Some Efficient Constructions". in Proceedings of INFOCOMM. 1999: IEEE Press.
• 8: Adrian Perrig , Dawn Song , J. D. Tygar, ELK, a New Protocol for Efficient Large-Group Key Distribution, Proceedings of the 2001 IEEE Symposium on Security and Privacy, p.247, May 14-16, 2001
• 9: D. Balenson, D. McGrew, and A. Sherman, "Key Management for Large Dynamic Groups: One-Way Function Trees and Amortized Initialization". 1999, Internet Draft.
• 10: D. M. Waller, E. C. Harder, and R. C. Agee, "Key Management for Multicast: Issues and Architectures". 1998, Internet Draft.
• 11: F. Zhu, A. H. Chan, and G. Noubir. "Optimal Tree Structure for Key Management of Simultaneous Join/Leave in Secure Multicast". in Proceedings of MILCOM. 2003. Boston, MA, USA.
• 12: Guevara Noubir. "A Scalable Key Distribution Scheme for Dynamic Multicast Groups". in Proceedings of Third European Research Seminar on Advances in Distributed Systems. 1999. Madeira Island, Portugal.
• 13: Sanjeev Setia , Samir Koussih , Sushil Jajodia , Eric Harder, Kronos: A Scalable Group Re-Keying Approach for Secure Multicast, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.215, May 14-17, 2000
• 14: Adrian Perrig , J. D. Tygar, Secure Broadcast Communication in Wired and Wireless Networks, Kluwer Academic Publishers, Norwell, MA, 2002
• 15: Yang Richard Yang , X. Steve Li , X. Brian Zhang , Simon S. Lam, Reliable group rekeying: a performance analysis, Proceedings of the 2001 conference on Applications, technologies, architectures, and protocols for computer communications, p.27-38, August 2001, San Diego, California, United States
• 16: R. Poovendran , John S. Baras, An Information Theoretic Analysis of Rooted-Tree Based Secure Multicast Key Distribution Schemes, Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology, p.624-638, August 15-19, 1999
• 17: Li Gong , Nachum Shacham, Multicast security and its extension to a mobile environment, Wireless Networks, v.1 n.3, p.281-295, 1995 [doi>10.1007/BF01200847]
• 18: Danilo Bruschi , Emilia Rosti, Secure multicast in wireless networks of mobile hosts: protocols and issues, Mobile Networks and Applications, v.7 n.6, p.503-511, December 2002 [doi>10.1023/A:1020781305639]
• 19: C. Zhang, et al. "Comparison of Inter-Area Rekeying Algorithms for Secure Wireless Group Communications". in Proceedings of Performance 2002. 2002. Rome, Italy.
• 20: Thomas Kostas, et al. "Key Management for Secure Multicast Group Communication in Mobile Networks". in Proceedings of DARPA Information Survivability Conference and Exposition. 2003.
• 21: Loukas Lazos and R. Poovendran. "Energy-Aware Secure Multicast Communication in Ad-hoc Networks Using Geographic Location Information". in Proceedings of IEEE International Conference on Acoustics Speech and Signal Processing. 2003. Hong Kong, China.
• 22: Frank Stajano , Ross J. Anderson, The Resurrecting Duckling: Security Issues for Ad-hoc Wireless Networks, Proceedings of the 7th International Workshop on Security Protocols, p.172-194, April 19-21, 1999
• 23: Levente Buttyán , Jean-Pierre Hubaux, Report on a working session on security in wireless ad hoc networks, ACM SIGMOBILE Mobile Computing and Communications Review, v.7 n.1, January 2003 [doi>10.1145/881978.882002]
• 24: Haowen Chan , Adrian Perrig , Dawn Song, Random Key Predistribution Schemes for Sensor Networks, Proceedings of the 2003 IEEE Symposium on Security and Privacy, p.197, May 11-14, 2003
• 25: Laurent Eschenauer , Virgil D. Gligor, A key-management scheme for distributed sensor networks, Proceedings of the 9th ACM conference on Computer and communications security, November 18-22, 2002, Washington, DC, USA [doi>10.1145/586110.586117]
• 26: Yih-Chun Hu, Adrian Perrig, and D. B. Johnson. "Efficient Security Mechanisms for Routing Protocols". in Proceedings of Network and Distributed System Security Symposium. 2003.
• 27: B. Dahill , K. Sanzgiri , B. N. Levine , E. M. Belding-Royer , C. Shields, A Secure Routing Protocol for Ad Hoc Networks TITLE2:, University of Massachusetts, Amherst, MA, 2002
• 28: P. Papadimitratos and Z. Haas. "Secure Routing for Mobile Ad Hoc Networks". in Proceedings of CNDS. 2002.
• 29: Levente Buttyán , Jean-Pierre Hubaux, Stimulating cooperation in self-organizing mobile ad hoc networks, Mobile Networks and Applications, v.8 n.5, p.579-592, October 2003 [doi>10.1023/A:1025146013151]
• 30: Adrian Perrig , Robert Szewczyk , J. D. Tygar , Victor Wen , David E. Culler, SPINS: security protocols for sensor networks, Wireless Networks, v.8 n.5, p.521-534, September 2002 [doi>10.1023/A:1016598314198]
• 31: Adrian Perrig , J. D. Tygar , Dawn Song , Ran Canetti, Efficient Authentication and Signing of Multicast Streams over Lossy Channels, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.56, May 14-17, 2000
• 32: Adrian Perrig, et al. "Efficient and Secure Source Authentication for Multicast". in Proceedings of Network and Distributed System Security Symposium. Feb. 2001.
• 33: "Cryptlib". http://www.cryptlib.orion.co.nz/.
• 34: Josh Broch , David A. Maltz , David B. Johnson , Yih-Chun Hu , Jorjeta Jetcheva, A performance comparison of multi-hop wireless ad hoc network routing protocols, Proceedings of the 4th annual ACM/IEEE international conference on Mobile computing and networking, p.85-97, October 25-30, 1998, Dallas, Texas, United States [doi>10.1145/288235.288256]
• 35: Alfred J. Menezes , Scott A. Vanstone , Paul C. Van Oorschot, Handbook of Applied Cryptography, CRC Press, Inc., Boca Raton, FL, 1996
• 36: David A. Cooper, A More Efficient Use of Delta-CRLs, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.190, May 14-17, 2000
• 37: Lloyd R. Welch and E. R. Berlekamp, "Error correction of algebraic block codes." US Patent, 4,633,470, 1986.

INDEX TERMS

Primary Classification:
  D. Software
  D.3 PROGRAMMING LANGUAGES
      D.3.3 Language Constructs and Features

General Terms:
Reliability, Security

Keywords:
MANET, multihop ad hoc, secure multicast, tracking