符合GSAKMP的覆盖多播水印协议的设计与分析

2250()(secureoverlaymulticastwater-markingprotocolSOMWP)2006GSAKMP[1](groupsecureassociationkeymanagementprotocol)PDU(protocoldataunit)11.1[2-4][5]WHIMID[6]MIKEYMIKEY[2][3]WHIMMAMWP[3]SOM-WP1.2LDPCLDPC[7]LDPCQ-LDPC[8][e-mail](10561009)(06010940)(1965)(1980)GSAKMP(650091)GSAKMPGSAKMP;;;;TP393A1000-7024(2008)01-0225-05DesignandanalysisofoverlaymulticastwatermarkingprotocolbasedonGSAKMPLUZheng-fu,WANGTao(SchoolofMathematicsandStatistics,YunnanUniversity,Kunming650091,China)AbstractGSAKMPisakey-managementprotocolframeworkformulticastandgroupsecurity.Basedontheanalysisofcryptographickey-relatedmechanismsofGSAKMP,usingsomeknowledgeaboutmulticastwatermarking,asecureoverlaymulticastwatermarkingprotocolwhichincludesbothdataconfidentialityandcopyrightprotection,isdesignedandanalyzed.Itisimportantforstreammediatransmissionwheretheleakingidentificationisneeded.Keywordsoverlaymulticastsecurity;GSAKMP;multicastwatermarkingprotocol;digitalwatermarking;digitalfingerprinting20081Jan.2008291Vol.29No.1ComputerEngineeringandDesign2263(5)()3(MP)(SP)MP()SPSPMPSPSPSPSPMP()(SMPSP)(MPSP)2.2SOMWP()SPS/MP/SPportport+13(SMPSP)(MPSP)()(1)(1)1(GO)(MP)/(GCKS)MP'SP1'(S)GMGMGCKSGOGM3GSAKMP3.1GSAKMPGSAKMP[9][10]3(GO)/(GCKS)(GM)GOGCKSGMGSA[1,9]SASASASA(REG)SA(REKEY)SA(DATA)[9]SAREGDATA[9]REKEYMPSP1()()3.2CA/CAID/CAS/CA/CAGMID/GMC/GMSGM/GM/GMGCKSID/GCKSSGCKS/GCKSKCA/KCA'CA/KGM/KGM'GM/KGCKS/KGCKS'GCKS/GID{M}kKMNi(AB)ABiCi(AB)Ni(BA)Ni(AB)iKCAKGCKS3.3GSAKMP3[1]GCKSGOGCKSGCKSGM2(1)GMCAGMIDGMC,,,1,(2)CAGMCAGMGMIDGMCKGMGM1R2/GMSP1/S-GCKS1R1/GMSP1'MP'SGOMP/GCKS227GMCAGMCA,,,1,,,1(3)GMCAGMN1(GMCA)N1(CAGM)C1(CAGM)GMIDGMCCA,,,1,,(4)GMGCKSGMGCKS,,,,,1,(5)GCKSCAGCKSGMCACAGM,,,1,,(6)CAGCKSCAGCKS,,1,,,1,,1,,,1(7)GCKSGMGCKSCAGMGMGCKSGMGMGCKSGM(),,,,1,,,1(8)GMGCKSGMGCKS,,1,,(9)GCKSGMGMGCKSGM(Lack_of_Ack)(),,2,,4SOMWPSOMWPPDUPDUSPDUPDUCPDUCPDU[1]7(3)SPDUGSAKMPSOMWP(SPDU)(47)GSAKMPSOMWP(56)4.1SOMWP(CPDU)PDU(4)RequesttojoinCPDU318IDGSAKMPOctetString2IPv4IPv6348IDIDID118ID*GSAKMP3ID123ID42KeyCreation1181v1448Requesttojoin54ID64PDU()3427KeyCreation8Nonce12801613482GSAKMPDiffie-Hellman1024-bitMODPGroupTruncated283402(128)403Nonce403Signature8801610413NonceNonce_I1414424(5GSAKMP3RequesttojoinPDU(CPDU)1.0000001000001011****************2.********************************3.****************00110001001100104.001100110000101100000001000010005.000000000000000000000000000000016.000000000000000000000001010101107.000011000000000000000000100001108.0000000000000010****************(128)40.****************000010000000000041.000000000000101000000001********42.********************************43.0000000000000000000000001010111044.000000000000000000011111********45.********************************46.********************************47.********************************48.****************0000000010000000ID(128)81.0000000000010100****************(20)86.****************2GCKSGMCACAGCKSGMGO2284)Nonce_I43Signature431CPDU0801617444GSAKMPDSS-SHA1-ASN1-DER8IDGSAKMPID_DN_STRING31444482154834IDID_DN_STRING128128ID8122081386220CPDU4.2SOMWPSPDU4.2.1SOMWPSOMWP43[1]7.13ID38v115[1]7.8.14SequenceID4148[1]12193194(193~255)()4.2.2DataPayload53[1]7.2.141410-1-GSAKMP4ID4.2.3FingerprintingPayload63[1]7.2.13ID[1]7.110-1-0171(2)ID()L1IDLDPC40ID484.2.4SOMWPSPDUSPDU7172373(v1)15414PDU62414.2.11(signature)14572343862119357315025736GSAKMPNextPayload201234567890123456789012345678901UserIDType103DataTypeRESERVEDPayloadLengthProxyIDTypeProxyIDLengthProxyIDValueLProxyNumberChecksumProxyLDPC_IDValueUserIDLengthUserIDValue4SOMWP5GSAKMPVersionTimeStampGroupIDTypeGroupIDLengthSourceIDLengthSourceIDTypeSourceIDValueGroupIDValue012301234567890123456789012345678901SquenceIDLengthRESERVEDNextPayloadNextPayload201234567890123456789012345678901DataValue103SquenceIDRESERVEDPayloadLengthRESERVEDDataType229194105843721011593602111211121603150210*12120*3=360150315615030802615131543ID3141115511715ID(40)5SOMWPBAN5.1BANBAN[2](1)##,(i)#,()PXPXPXPQXPQX[11](2)[11],..,..(3)P[11],5.2BAN5.2.1(1),(2),(3),(4),(5),;,;(6),;,(7)//#1/2(1)(2)GCKS/GMKGCKS/KGMGM(3)GCKS(4)GCKSGMGCKS(5)(6)(7)GCKSGMCAN1/N25.2.2(1),;,(2),;,(3),;,(4),;,5.2.3BANGCKSGMGMGCKS(4)(7)(8)((9)):,;,,1,2:,;,,1(1)(2)[2],;,,1(2)(4)[2],;,,1(3)(7),;,(4)[2],;,(258)7SOMWPPDU(SPDU)1.0000001000001011****************2.********************************3.****************00110001001100104.001100110000001000001011********5.********************************6.************************001100107.001100110011010000000001********8.********************************9.********************************10.********************************11.****************000000000000000012.0000000000000001000000000000000013.0000001001110000000000000000100014.1100000100000000000000001010111015.000000000000000000011111********16.********************************17.********************************18.********************************19.****************0000000010000000ID(128)52.0000000000010100****************(20)57.****************110000100000000058.0000000000000000000000010111010059