TAILIEUCHUNG - A novel establishing and managing secure group key method

This paper proposes a novel method to prevent man in the middle attack by combining the OFT scheme with digital signatures scheme which is used to authenticate the participants. Beside, the proposed method can also prevent the collusion attack. | Công nghệ thông tin Cơ sở toán học cho tin học A NOVEL ESTABLISHING AND MANAGING SECURE GROUP KEY METHOD Nguyen Dao Truong Abstract The one-way function tree OFT is an efficient group key management scheme. Many methods have been proposed to improve it against different types of internal attack. However these previous works have not considered external attacks such as man in the middle MITM . This is a very dangerous attack because it can intervene in the key establishment and key agreement process. This paper proposes a novel method to prevent man in the middle attack by combining the OFT scheme with digital signatures scheme which is used to authenticate the participants. Beside the proposed method can also prevent the collusion attack. Từ khóa One-way function tree Replay attack Collusion attack Man in the middle MITM . 1. INTRODUCTION OFT 3 4 is a centralized group key management scheme. It is based on the Logical Key Hierarchy scheme 5 6 and works as a key managing structure. It adds one-way functions to the LHK. The total communication overhead of the group manager group manager when a member is eliminated is reduced to log2n where n is the total number of members in the group. It is reduced by a half comparing to LKH. Beside OFT has some vulnerabilities. First is the vulnerability under a sophisticated membership-evolving attack such as collusion attack that Horng pointed out 1 . Next is the vulnerability under an external attack and Man in the middle attack is an example 2 . In order to improve OFT scheme s invulnerability Ku and Chen researched these attacks and proposed other collusion attack methods 7 . Xu et al. also show the ability to attack between two members of the system 8 . However these researches and proposed improvements only focused on internal attacks or collusion attack in specific despite the fact that these networks are increasingly exposed to public external networks. In this paper we propose a security enhanced solution for the OFT .

• An ninh - Bảo mật
• One way function tree
• Replay attack
• Collusion attack
• Man in the middle
• Public external networks