Multicast And Broadcast Rekeying Algorithm Research Articles

Secure and Efficient Multicast Rekeying Approach for Non-Transparent Relay-Based IEEE 802.16 Networks

Many emerging applications that depend on secure group communications demand the privacy of participants and access control at the multicast server. The multicast and broadcast services in IEEE 802.16 are efficient and power saving mechanisms, which no doubt also provide subscribers with strong and powerful security protection from the theft of service by encrypting broadcast connections between subscriber station (SS), relay station (RS), non-transparent relay station (NRS) and Multihop relay base station (MR-BS). However, the existing multicast and broadcast rekeying algorithm (MBRA) not only facing forward secrecy, backward secrecy and scalability problems for IEEE 802.16e but also for multi- hop relay based networks both in centralized as well as distributed zone. Although many researches try to give solutions for the above problems, all of them focus mainly on IEEE 802.16e networks and none of paper is published on distributed relay-based Wimax networks. This paper illustrates the main security problem of MBRA in general which is scalability, backward and forward secrecy and proposes a new Secure and efficient distributed Relay- based Rekeying Algorithm (SEDRRA) scheme for non- transparent Multihop IEEE 802.16 networks. The proposed scheme uses non-transparent decode and forward relays. Both analysis and performance evaluation show that our scheme can significantly reduce the complexity and solve all of the above problems in an efficient way.

Security Issues and Solutions of the Key Management Protocols in IEEE 802.16j Multi-Hop Relay Network

The recent IEEE 802.16j-2009 adds multi-hop relay capabilities to IEEE 802.16 systems, which aims to offer improved coverage and capacity over single-hop radio access systems. In this paper, we point out several security issues, including non-authenticated privacy and key management messages, insecure relay multicast rekeying algorithm and insecure Multicast and Broadcast Rekeying Algorithm (MBRA), of the key management protocols in IEEE 802.16j-2009 and give some solutions. In particular, we propose a new Secure MBRA (SMBRA) based on identity and logical key tree to solve the security issues of MBRA. SMBRA can not only provide backward and forward secrecy of communications but also avoid key forgery. Furthermore, our theoretical analysis and simulation indicate that SMBRA is much more efficient and adequate, especially in a large group.

Revisiting WiMAX MBS security

IEEE 802.16 technology also well known as WiMax is poised to deliver the next step in the wireless evolution. This is further fostered by the 802.16e specification which, amongst other things, introduces support for mobility. The Multicast/Broadcast Service (MBS) is also an integral part of 802.16e destined to deliver next generation services to subscribers. In this paper we concentrate on the Multicast and Broadcast Rekeying Algorithm (MBRA) of 802.16e. This algorithm has been recently criticized for various vulnerabilities and security inefficiencies, as its designers are trying to balance wisely between performance and security. After surveying related work, we extensively discuss MBRA security issues and propose the use of a novel asymmetric group key agreement protocol based on the work in Wu et al. (2009) [3] . Our scheme guarantees secure delivery of keys to all the members of a given group and mandates rekeying upon join and leave events. It can prevent insider attacks since only the Base Station possesses a secret encryption key while all other members in the network acquire the transmitted data by using their secret decryption keys. We compare our scheme with related work and demonstrate that although heavier in terms of computing costs, it compensates when scalability and security come to the foreground.

Efficient rekeying algorithms for WiMAX networks

AbstractIn this paper, we study the rekeying issue in IEEE 802.16e WiMAX networks. The existing rekeying scheme—the Multicast and Broadcast Rekeying Algorithm (MBRA) unicasts new keys to each subscriber station (SS). This scheme does not scale well since it incurs large communication overheads when the number of SSs increase. In our work, first we propose a general tree‐based rekeying scheme, which is more efficient than the MBRA. We also formulate an optimization problem to determine the optimal tree structure for given number of SSs. Furthermore, we present a novel and efficient rekeying scheme for WiMAX networks. Our new rekeying scheme utilizes efficient security schemes and the WiMAX network application feature. Both analysis and performance evaluation show that our rekeying scheme can significantly reduce the communication overheads. Copyright © 2009 John Wiley & Sons, Ltd.

Guest Editorial: Special Issue on: WiMAX security and applications

Worldwide Interoperability for Microwave Access (WiMAX) aims to provide high-speed, high-bandwidth, and high-capacity Broadband Wireless Access (BWA) for residential as well as enterprise applications. WiMAX is designed to provide high data rate multimedia services, e.g., voice, data, Internet, email, instant messenger, and games. The security of WiMAX has been under researchers’ scrutiny for the last few years. Both architectures and protocols on WiMAX security have been extensively studied in academics and industries. Several articles, survey reports, and research papers have been published and a number of flaws have been highlighted in the literature. The IEEE Committee has published several revisions of the IEEE 802.16 standard since its initial release in 2001, but many of the vulnerabilities have still been left unattended in the standard. Ensuring the security of these complex and yet resource constraint systems has emerged as one of the most pressing challenges. The aim of this Special Issue is to bring together researchers and practitioners in related areas and to encourage interchange and cooperation under the context of WiMAX security between the research community and the industrial/ consumer community. With regard to such cyber security aspects, there is an increasing demand for measures to guarantee and fully attain the authentication, confidentiality, data integrity, privacy, access control, non-repudiation, and availability of system services. The first paper in this Special Issue by Barghava et al.: discusses security problems, with a focus on collaborative attacks, in the WiMAX scenario. The WiMAX protocol suite, which includes but is not limited to DOCSIS, DES, and AES, consists of a large number of protocols. The authors presented briefly the WiMAX standard and its vulnerabilities. They pinpoint the problems with individual protocols in the WiMAX protocol suite, and discuss collaborative attacks on WiMAX systems. Then several typical WiMAX attack scenarios were presented, including: bringing a large number of attackers to increase their computation power and break WiMAX protocols; assembling a sufficient number of attackers to influence the decision-making of core machines, which includes routing attacks and Sybil attacks, and exploiting implementations that do not conform to the WiMAX specification completely, causing interoperability problems among various protocols, including the ones in typical WiMAX/WiFi/LAN deployment scenarios. Then the authors presented theoretical models and practical solutions to profile, model, and analyze collaborative attacks in WiMAX. Employed attack graphs to vulnerability were analyzed. Experimental results are carried out to verify the models and validate the analysis. Du et al.: study the rekeying issue in IEEE 802.16e WiMAX networks. The existing rekeying scheme— the Multicast and Broadcast Rekeying Algorithm (MBRA) unicasts new keys to each subscriber station (SS). This scheme does not scale well since it incurs large communication overheads when the number of SSs increases. In this work, first a general tree-based rekeying scheme was proposed, which is more efficient than the MBRA. Also formulate an optimization problem to determine the optimal tree structure for given number of SSs. Furthermore, a novel and efficient rekeying scheme for WiMAX networks was presented. The new rekeying scheme utilizes efficient

Secure Multicast in WiMAX

Multicast enables efficient large-scale content distribution and has become more and more popular in network service. Security is a critical issue for multicast because many applications require access control and privacy. This issue is more sensitive to wireless network, which is lack of physical boundaries. IEEE 802.16 is the standard for next generation wireless network, which aims to provide the last mile access for Wireless Metropolitan Area Network (WirelessMAN). Multicast is also supported in IEEE 802.16, and a Multicast and Broadcast Rekeying Algorithm (MBRA) was proposed in the standard as an optional function for secure multicast. However, this algorithm does not provide backward and forward secrecy. It is not scalable to a large group either. This paper reviews the above two deficiencies of MBRA and proposes revision to address these problems for Intra-BS multicast. We also propose algorithms for secure multicast in different scenarios of WirelessMAN besides its basic schema, including Inter-BS multicast, multicast for mesh network, and multicast during handover.

Efficient and Secure Multicast in WirelessMAN: A Cross-layer Design

Effectively adding security measures to a multicast service is an intriguing problem, especially when the service isdeployed in a wireless setting. Next generation IEEE 802.16standard WirelessMAN networks are a perfect example of this problem, and the latest draft specification of the standard includes a secure protocol solution called Multicast and Broadcast Rekeying Algorithm (MBRA). In this paper, we expose the security problems of MBRA, including non-scalability and omission of backward and forward secrecy, and propose new approaches, ELAPSE and ELAPSE+, to address these problems. In particular, ELAPSE+ makes use of membership and mobility information gathered in the application layer to augment the adaptive group management in the MAC layer. We analyze the security property of ELAPSE and ELAPSE+, and compare their performances with MBRA by simulating group rekeying scenarios.

Focusing based on the structure of a model-based diagnosis

IEEE 802.16 technology also well known as WiMax is poised to deliver the next step in the wireless evolution. This is further fostered by the 802.16e specification which, amongst other things, introduces support for mobility. The Multicast/Broadcast Service (MBS) is also an integral part of 802.16e destined to deliver next generation services to subscribers. In this paper we concentrate on the Multicast and Broadcast Rekeying Algorithm (MBRA) of 802.16e. This algorithm has been recently criticized for various vulnerabilities and security inefficiencies, as its designers are trying to balance wisely between performance and security. After surveying related work, we extensively discuss MBRA security issues and propose the use of a novel asymmetric group key agreement protocol based on the work in Wu et al. (2009) [3]. Our scheme guarantees secure delivery of keys to all the members of a given group and mandates rekeying upon join and leave events. It can prevent insider attacks since only the Base Station possesses a secret encryption key while all other members in the network acquire the transmitted data by using their secret decryption keys. We compare our scheme with related work and demonstrate that although heavier in terms of computing costs, it compensates when scalability and security come to the foreground.