Patent ID: 7627755
Filing Date: 2009-12-01
Classification: H04L,H04W

Abstract:
1. A method of authenticating candidate members wishing to participate in an IP multicast via a communication network, where data sent as part of the multicast is to be secured using a key revocation based scheme the method comprising: a candidate member receiving a multicast invitation from a group controller to join the multicast; the candidate member sending a join request message to the group controller, the join request message including the candidate member's originating IPv6 address, a copy of the candidate member's public key from the candidate member's public-private key pair and a digital signature, the digital signature generated by applying a cryptographic hashing function to the candidate member's private key, from the candidate member's public-private key pair, a random number and time stamp, both received from the group controller; at the group controller, verifying that the public key received from the candidate member wishing to participate is owned by the candidate member and that the public key is associated with the respective candidate member's source IPv6 address by inspecting an interfaceID part of the IPv6 address; using the digital signature, further verifying that the candidate member owns the public-private key pair to which the public key belongs and that the candidate terminal owns the source IP address whereby a candidate subscriber proves ownership of the public key contained in a certificate.