APPARATUS AND METHOD FOR DATA SOURCE AUTHENTICATION FOR MULTICAST SECURITY

摘要

A method and apparatus for data source authentication in multicast communications is provided. Multicasting a packet (230) may be divided into two actions. The first action includes unicasting the packet from a sending member to a group controller (220). The second action includes multicasting the packet from the group controller (220) to the multicast group. The packet (230) may be unicast to the group controller (220) with a message authentication code (MAC) that may be generated by encrypting the packet with a symmetric key that is intended to be known only to the sending member and the group controller (220). After authenticating the MAC, the group controller multicasts the packet to the multicast group. The group controller (220) includes with the packet a separate MAC for substantially each receiving member of the multicast group, each encrypted by a separate symmetric key. Each symmetric key may be intended to be known only by the receiving member and the group controller.