It focuses on two main areas of concern with respect to key management, which are, initializing the multicast group with a common net key and rekeying the multicast group. In particular, this report identifies a technique which allows for secure compromise recovery, while also being robust against collusion of excluded users. This document describes extensions to the base SKIP protocol to allow encrypted and authenticated multicast communications. MKMP is intended to provide scalable and secure distribution of multicast keys. Routers do not need join secure multicast group, and it is independent of underlying m-cast routing.
Key acquisition is separate from group join.
To create a secure group, group key manager creates key, list of candidate key distributors, and access control info. Only routers already on the distribution tree become GKDs. Next steps are to clean up and issue draft MKMP specification. MKMP may require a separately chartered WG, but won't be considered by IESG until current IPsec docs passed. Kruus This paper addresses issues relevant to implementing security for IP multicast networks.