PIMac: Multicast Access Control Implementation in PIM-SM

In this paper, we present an access control scheme for PIM-SM multicast domain. In order to avoid the overhead of digital signature algorithm, the proposed solution makes use of the Rendezvous Point to collect keys and implement a distributed shared-key based multicast access control system. As it supplies efficient host access control in PIM-SM domain, we name this scheme PIMac. Compared with the existing multicast admission control solutions, PIMac has following advantages: (1) support both receiver and sender access control; (2) realize host exclusion based on expire time; (3) compatibility with current PIM-SM protocol; (4) lower join latency; (5) anti-replay and DoS robustness; last but not least, (6) PIMac architecture is divided into two separated domains: AAA domain and multicast routing domain, entities in each domain do not rely on PKI interoperability or common secret to authenticate X. Li · H. Zhang National Engineering Laboratory for Next Generation Internet Interconnection Devices, Beijing Jiaotong University, Beijing, People’s Republic of China J.-M. Chang · J.-L. Chen Department of Computer Science & Information Engineering, National Dong Hwa University, Hualien, Taiwan J.-L. Chen Department of Electrical Engineering, National Taiwan University of Science & Technology, Taipei, Taiwan H.-C. Chao Department of Electronic Engineering, Institute of Computer Science & Information Engineering, National Ilan University, I-Lan, Taiwan H.-C. Chao Department of Electrical Engineering, National Dong Hwa University, Hualien, Taiwan X. Li (B) School of Electronics and Information Engineering, Beijing Jiaotong University, 602 Room, South of No. 9 Teach Building, 100044 Beijing, People’s Republic of China e-mail: [email protected]