Key distribution and update for secure inter-group multicast communication

ABSTRACT

Group communication has become an important component in wireless networks. In this paper, we focus on the environments in which multiple groups coexist in the system, and both intra and inter group multicast traffic must be protected by secret keys. We propose a mechanism that integrates polynomials with flat tables to achieve personal key share distribution and efficient key refreshment during group changes. The proposed mechanism distributes keys via true broadcast. The contributions of the research include: (1) By switching from asymmetric algorithms to symmetric encryption methods, the proposed mechanism avoids heavy computation, and improves the processing efficiency of multicast traffic and the power usage at the wireless nodes. The group managers do not have to generate public-private key pairs when the group member changes. (2) It becomes more difficult for an attacker to impersonate another node since personal key shares are adopted. The additional storage overhead at the wireless nodes and the increased broadcast traffic during key refreshment are justified. In addition, we describe techniques to improve the robustness of the proposed mechanism under the complicated scenarios such as collusive attacks and batch group member changes.

REFERENCES

• 1: Seung Yi , Prasad Naldurg , Robin Kravets, Security-aware ad hoc routing for wireless networks, Proceedings of the 2nd ACM international symposium on Mobile ad hoc networking & computing, October 04-05, 2001, Long Beach, CA, USA [doi>10.1145/501449.501464]
• 2: M. Waldvogel, G. Caronni, D. Sun, N. Weiler, and B. Plattner. The VersaKey Framework: Versatile group key management. IEEE JSAC Special issue on middleware, 17(9), 1614--1631, 1999.
• 3: I. Chang, R. Engel, D. Kandlur, D. Pendarakis, and D. Saha. Key management for secure internet multicast using boolean function minimization techniques. In IEEE INFOCOM, 689--698, 1999.
• 4: Todd D. Hodes , Randy H. Katz, Composable ad hoc location-based services for heterogeneous mobile clients, Wireless Networks, v.5 n.5, p.411-427, Oct. 1999 [doi>10.1023/A:1019171616176 ]
• 5: J. Agre, A. Akinyemi, L. Ji, R. Masuoka, and P. Thakkar. A layered architecture for location based services in wireless ad hoc networks. In Proc. of IEEE Aerospace Conference, 2002.
• 6: H. Harney and C. Muckenhirn. Group Key Management Protocol (GKMP) Architecture. RFC 2094, 1999.
• 7: D. Wallner, E. Harder, and R. Agee. Key Management for Multicast: Issues and Architectures. RFC 2627, 1999.
• 8: Chung Kei Wong , Mohamed Gouda , Simon S. Lam, Secure group communications using key graphs, IEEE/ACM Transactions on Networking (TON), v.8 n.1, p.16-30, Feb. 2000 [doi>10.1109/90.836475]
• 9: D.A. McGrew and A.T. Sherman. Key establishment in large dynamic groups using oneway function trees. Tech. Rep. No. 0755, Network Associates, Inc., 1998.
• 10: R. Canetti, J. Garay, G. Itkis, D. Micciancio, M. Naor, and B. Pinkas. Multicast Security: A Taxonomy and Some Efficient Constructions. In IEEE INFOCOM, 708--716, 1999.
• 11: R. Canetti, T. Malkin, and K. Nissim. Efficient communication-storage tradeoffs for multicast encryption. In Advances in Cryptology -- EUROCRYPT, 459--474, 1999.
• 12: Adrian Perrig , Dawn Song , J. D. Tygar, ELK, a New Protocol for Efficient Large-Group Key Distribution, Proceedings of the 2001 IEEE Symposium on Security and Privacy, p.247, May 14-16, 2001
• 13: Suvo Mittra, Iolus: a framework for scalable secure multicasting, Proceedings of the ACM SIGCOMM '97 conference on Applications, technologies, architectures, and protocols for computer communication, p.277-288, September 14-18, 1997, Cannes, France
• 14: L. Dondeti, S. Mukherjee, and A. Samal. Scalable secure one-to-many group communication using dual encryption. Computer Communications, 23(17), 1681--1701, 1999.
• 15: Refik Molva , Alain Pannetrat, Scalable multicast security in dynamic groups, Proceedings of the 6th ACM conference on Computer and communications security, p.101-112, November 01-04, 1999, Kent Ridge Digital Labs, Singapore [doi>10.1145/319709.319723]
• 16: Sandro Rafaeli , David Hutchison, Hydra: A Decentralised Group Key Management, Proceedings of the 11th IEEE International Workshops on Enabling Technologies: nfrastructure for Collaborative Enterprises, p.62-67, June 10-12, 2002
• 17: Bob Briscoe, MARKS: Zero Side Effect Multicast Key Management Using Arbitrarily Revealed Key Sequences, Proceedings of the First International COST264 Workshop on Networked Group Communication, p.301-320, November 17-20, 1999
• 18: Sanjeev Setia , Samir Koussih , Sushil Jajodia , Eric Harder, Kronos: A Scalable Group Re-Keying Approach for Secure Multicast, Proceedings of the 2000 IEEE Symposium on Security and Privacy, p.215, May 14-17, 2000
• 19: R. Pietro, L. Mancini, Y. Law, S. Etalle, and P. Havinga. LKHW: A Directed Diffusion-Based Secure Multicast Scheme for Wireless Sensor Networks. In Proc. of IEEE International Conference on Parallel Processing Workshops, 2003.
• 20: T. Kaya , G. Lin , G. Noubir , A. Yilmaz, Secure multicast groups on ad hoc networks, Proceedings of the 1st ACM workshop on Security of ad hoc and sensor networks, October 31, 2003, Fairfax, Virginia [doi>10.1145/986858.986872]
• 21: L. Lazos and R. Poovendran. Location-Aware Secure Wireless Multicast in Ad-Hoc Networks under Heterogeneous Pathloss. Technical Report UWEETR-2003-0012, University of Washington, 2003.
• 22: L. Lazos and R. Poovendran. Energy-Aware Secure Multicast Communication in Ad-hoc Networks Using Geographic Location Information. In Proc. of IEEE International Conference on Acoustics Speech and Signal Processing, 2003.
• 23: S. Mäki, T. Aura, and M. Hietalahti. Robust Membership Management for Ad-hoc Groups. in Proc. of Nordic Workshop on Secure IT Systems, 2000.
• 24: A. Yasinsac, V. Thakur, S. Carter, and I. Cubukcu. A Family of Protocols for Group Key Generation in Ad Hoc Networks. In Proc. o IASTED International Conference on Communications and Computer Networks, 183--187, 2002.
• 25: B. DeCleene, L. Dondeti, S. Griffin, T. Hardjono, D. Kiwior, J. Kurose, D. Towsley, S. Vasudevan, and C. Zhang. Secure Group Communications for Wireless Networks. In IEEE MILCOM, 2001.
• 26: Danilo Bruschi , Emilia Rosti, Secure multicast in wireless networks of mobile hosts: protocols and issues, Mobile Networks and Applications, v.7 n.6, p.503-511, December 2002 [doi>10.1023/A:1020781305639]
• 27: M. Moharrum, R. Mukkamala, and M. Eltoweissy. CKDS: An Efficient Combinatorial Key Distribution Scheme for Wireless Ad-Hoc Networks. In Proc. of IEEE International Conference on Performance, Computing, and Communications, 631--636, 2004.
• 28: S. Zhu, S. Setia, S. Xu, and S. Jajodia. GKMPAN: An Efficient Group Rekeying Scheme for Secure Multicast in Ad-Hoc Networks. In Proc. of International Conference on Mobile and Ubiquitous Systems: Networking and Services, 42--51, 2004.
• 29: Adi Shamir, How to share a secret, Communications of the ACM, v.22 n.11, p.612-613, Nov. 1979 [doi>10.1145/359168.359176]
• 30: Jessica Staddon , Sara Miner , Matt Franklin , Dirk Balfanz , Michael Malkin , Drew Dean, Self-Healing Key Distribution with Revocation, Proceedings of the 2002 IEEE Symposium on Security and Privacy, p.241, May 12-15, 2002
• 31: Donggang Liu , Peng Ning , Kun Sun, Efficient self-healing group key distribution with revocation capability, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948141]
• 32: Donggang Liu , Peng Ning , Rongfang Li, Establishing pairwise keys in distributed sensor networks, ACM Transactions on Information and System Security (TISSEC), v.8 n.1, p.41-77, February 2005 [doi>10.1145/1053283.1053287]
• 33: Sara Miner More , Michael Malkin , Jessica Staddon , Dirk Balfanz, Sliding-window self-healing key distribution, Proceedings of the 2003 ACM workshop on Survivable and self-regenerative systems: in association with 10th ACM Conference on Computer and Communications Security, p.82-90, October 31-31, 2003, Fairfax, VA [doi>10.1145/1036921.1036930]
• 34: R. Pickholtz, D. Schilling, and L. Milstein. Theory of spread spectrum communications -- a tutorial. IEEE Trans. Comm., 1982.
• 35: V. Gupta, S. Krishnamurthy, and M. Faloutsos. Denial of service attacks at the MAC layer in wireless ad hoc networks. In Proc. of Milcom, 2002.
• 36: P. Bjorklund, P. Varbrand, and D. Yuan. Resource optimization of spatial TDMA in ad hoc radio networks: A column generation approach. In IEEE INFOCOM, 2003.
• 37: Michael Steiner , Gene Tsudik , Michael Waidner, Key Agreement in Dynamic Peer Groups, IEEE Transactions on Parallel and Distributed Systems, v.11 n.8, p.769-780, August 2000 [doi>10.1109/71.877936 ]
• 38: Samuel T. Redwine, Jr., A Logic for the Exclusion Basis System, Proceedings of the Proceedings of the 37th Annual Hawaii International Conference on System Sciences (HICSS'04) - Track 9, p.90280.1, January 05-08, 2004
• 39: Linda Morales , I. Hal Sudborough , Mohamed Eltoweissy , M. Hossain Heydari, Combinatorial Optimization of Multicast Key Management, Proceedings of the 36th Annual Hawaii International Conference on System Sciences (HICSS'03) - Track 9, p.332.2, January 06-09, 2003
• 40: Bharat K. Bhargava , Yuhui Zhong, Authorization Based on Evidence and Trust, Proceedings of the 4th International Conference on Data Warehousing and Knowledge Discovery, p.94-103, September 04-06, 2002
• 41: Yuhui Zhong , Bharat Bhargava, Formalization of dynamic trust and uncertain evidence for user authorization, Purdue University, West Lafayette, IN, 2005
• 42: Nachiketh R. Potlapally , Srivaths Ravi , Anand Raghunathan , Niraj K. Jha, Analyzing the energy consumption of security protocols, Proceedings of the 2003 international symposium on Low power electronics and design, August 25-27, 2003, Seoul, Korea [doi>10.1145/871506.871518]
• 43: P. Ni and Z. Li. Energy Cost Analysis of IPSec on Handheld Devices. Microprocessors and Microsystems, special issue on Secure Computing Platform, 28(10), 585--594, 2004.
• 44: Xiao Chen , Jie Wu, Multicasting techniques in mobile ad hoc networks, The handbook of ad hoc wireless networks, CRC Press, Inc., Boca Raton, FL, 2003
• 45: L. Ji and M. Corson. Differential destination multicast - a MANET multicast routing protocol for small groups, In Proc. of IEEE INFOCOM, 2001.
• 46: Lusheng Ji , M. Scott Corson, Explicit multicasting for mobile ad hoc networks, Mobile Networks and Applications, v.8 n.5, p.535-549, October 2003 [doi>10.1023/A:1025189828172]
• 47: K. Chen and K. Nahrstedt. Effective Location-Guided Tree Construction Algorithms for Small Group Multicast in MANET, In Proc. of IEEE INFOCOM, 1180--1189, 2002.
• 48: C. Gui and P. Mohapatra. Efficient Overlay Multicast for Mobile Ad Hoc Networks, In Proc. of IEEE Wireless Communications and Networking Conference (WCNC), 2003.
• 49: S. Vasudevan, B. DeCleene, N. Immerman, J. Kurose, and D. Towsley. Secure Leader Election Algorithms for Wireless Ad Hoc Networks. In Proc. of IEEE DARPA Information Survivability Conference and Exposition (DISCEX), 2003.

INDEX TERMS

Primary Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS
      C.2.0 General
          Subjects: Security and protection (e.g., firewalls)

General Terms:
Design, Security

Keywords:
inter-group communication, key distribution and update, security