One way of doing this is to associate a role with each multicast group. Different users belong to different groups and can be assigned specific capabilties. These capabilities will further enforce this division and simplify the administration and enforce ment of security policies. If the application capsules use the ANTS ANEP formats , this will involve very little work on our part. All we need to do is write the required capabilties and define the appropriate roles.
Congestion control is a network administration issue.
In our security framework we can create special administrator roles. Associated with each role is a set of dynamically configured privileges, access rights and other control information that can be used to implement customized congestion control algorithms. Since we have a open design that confirms to the architecture specifications, we believe that we can provide the required support to any application that also adheres to these specifications. This work is being conducted by the CANEs group at Georgia Tech and the University of Kentucky. We hope to use Maude to verify our policy framework design.