Multicast Key Management via Segmented Group Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a multicast environment, managing security keys efficiently becomes challenging due to increased network load and bandwidth consumption, especially when receiver groups change, as existing methods require generating channels for each receiver, affecting overall system performance.
Innovation Solution
A method involving a sender encrypting image data with a random key and transmitting it via a multicast channel, while the manager encrypts and transmits the key through unicast and multicast channels, allowing receivers to decrypt the image data using a decrypted random key, with periodic key renewal to manage dynamic changes in receiver groups without affecting all groups.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If unicast transmission method is used for each receiver, then security key management becomes simpler, but network bandwidth consumption increases significantly and load on network camera increases
Solution Approach 1:
The patent segments the key management system into multiple key managers that handle different receiver groups. Each key manager manages a specific group of receivers, allowing key distribution to be divided into smaller, more manageable units. This segmentation reduces the bandwidth consumption of individual key managers while maintaining secure unicast-like key distribution through multicast channels.
Solution Approach 2:
The patent introduces key managers as intermediary entities between the network camera and receivers. These key managers handle key distribution and renewal operations, acting as mediators that reduce the direct communication burden on the network camera. The key managers use multicast channels to efficiently distribute keys to multiple receivers simultaneously, reducing overall network bandwidth consumption.
2Reliability
If key renewal is performed for the entire system, then security is maintained, but network load increases and affects all receiver groups
Solution Approach 1:
The patent divides the receiver system into multiple groups, each managed by a dedicated key manager. When key renewal is needed, only the specific key manager and its associated receiver group are affected, not the entire system. This segmentation isolates key renewal operations to local groups, reducing network load and preventing system-wide performance degradation.
Solution Approach 2:
The patent implements local key management where each key manager handles key distribution and renewal for its specific receiver group independently. This local quality approach allows key renewal to be performed locally within each group without impacting other groups, maintaining security while minimizing overall network load and preserving system productivity.
3Adaptability or versatility
If multiple channels are generated for each receiver, then individual key management is achieved, but device complexity increases
Solution Approach 1:
The patent merges multiple individual channel management operations into group-based multicast channel management. Instead of managing separate unicast channels for each receiver, the system uses multicast channels to distribute keys to multiple receivers simultaneously. This merging approach maintains individual key management capabilities while significantly reducing channel management complexity.
Solution Approach 2:
The patent makes the multicast channel universal by enabling it to serve multiple receivers simultaneously for key distribution. The same multicast channel can be used by multiple key managers to distribute keys to their respective receiver groups, eliminating the need for separate dedicated channels for each receiver and reducing overall system complexity.
Data Source
AI summary
Provided is a method of managing keys in a security system of a multicast environment. The key managing method according to the embodiments of the present disclosure enables key management that a key renewal regarding a receiver joining or leaving a group does not affect all groups.