Search

A key distribution scheme is used to distribute a session key for broadcasting systems(multicast communications). None of the existing key distribution schemes with the exception of the Jeong-Kwon-Lee key distribution scheme provide both security against session state reveal attacks and security against long-term key reveal attacks. Unfortunately, the Jeong-Kwon-Lee key distribution scheme suffers from three disadvantages in terms of efficiency unlike the existing schemes: (1) Unscalability for the dynamic user group, (2) Abuse of cryptographic algorithms, and (3) Inefficiency. In this paper, we propose an ID-based key distribution scheme which is secure against session state reveal attacks and long-term key reveal attacks. Also, our scheme offers the scalability, non-usage of additional cryptographic algorithms, and efficiency similar to those of the existing schemes.

At present, interest in the new IT services (Wibro, DMB, VoIP, IPTV, etc) is on the rise, and the government is promoting the IT839 Strategy. Any service provider who wants to provide a new IT service needs to secure appropriate security measures based on a threat and vulnerability analysis from the service planning stage. In addition, the need to prepare countermeasures against the possibility of quality deterioration due to the application of security measures has frequently been pointed out. However, it is difficult to use the existing methodologies to perform a threat and vulnerability analysis that enables the application of the security technology without sacrificing quality (when applied at the planning stage for a new IT service), as these methodologies are only suitable for the information assets of an organization that has already been established. This paper proposes an information security framework capable of identifying security threats at the new IT service planning stage, and of easily identifying the relevance between the security technologies and QoS, so that the security technology can be applied while maintaining the quality of the service.