An architecture for user authentication of IP multicast and its implementation

Author

Ishikawa, Norihiro ; Yamanouchi, Nagatsugu ; Takahashi, Osamu

Author_Institution

NTT Inf. & Commun. Syst. Lab., Kanagawa, Japan

fYear

1999

fDate

1999

Firstpage

81

Lastpage

87

Abstract

IP multicast is now at the experimental stage. In order to deploy IP multicast over the Internet as a commercial service, several issues on IP multicast must be resolved. Such issues include security, accounting, QoS and IP multicast address allocation. Among them, one of the most important issues of IP multicast is security for IP multicast. There are no standards on security functions for IP multicast at this time. We propose an architecture for the user authentication function of IP multicast which prevents an unauthorized user from sending and receiving IP multicast datagrams. We extend IGMPv2 for the user authentication function of IP multicast and use RADIUS as the authentication server. We have implemented a prototype system based on our architecture on FreeBSD. Implementation results are also described

Keywords

Internet; authorisation; message authentication; multicast communication; telecommunication security; transport protocols; FreeBSD; IGMPv2; IP multicast; Internet; RADIUS; accounting; authentication server; datagrams; multicast address allocation; prototype system; quality of service; security; standards; user authentication; Authentication; Communication system security; Data security; IP networks; Information security; Laboratories; Multicast protocols; Prototypes; Videoconference; Web and internet services;

fLanguage

English

Publisher

ieee

Conference_Titel

Internet Workshop, 1999. IWS 99

Conference_Location

Osaka

Print_ISBN

0-7803-5925-9

Type

conf

DOI

10.1109/IWS.1999.810996

Filename

810996