Subject: [MSEC] drafts on security for multimedia

From: "Elisabetta Carrara (ERA)" <[email-masked]>
Date: Thu, 2 Aug 2001 16:27:15 +0200

Hi
we would like to draw the attention on some work we are doing on the 
issue of security for (conversational) multimedia.

A security protocol for RTP (SRTP) is currently working group item in 
the AVT WG.

There are then two new (related) drafts about key management, which 
will be presented in the MSEC WG, and reported to AVT.

You can find the abstracts in the following. 

Thanks,
cheers 

/Elisabetta

      -----------------------------------------------------------------------------------------------------------------------
       "The Secure Real Time Transport Protocol"
       <draft-ietf-avt-srtp-01.txt>

	Abstract:

	This document describes the Secure Real Time Transport Protocol (SRTP), a 
	profile of the Real Time Transport Protocol (RTP) which can provide confidentiality, 
	message authentication (in groups, also source origin authentication), replay 
	protection, and implicit header authentication.

	SRTP can achieve high throughput and low packet expansion by using an additive 
	stream cipher for encryption, a universal hashing based function for message 
	authentication, and an 'implicit' index for sequencing based on the RTP sequence 
	number.
	Robust and flexible re-keying/access control to media can be achieved through an 
	optional security parameter index (SPI).

	In addition, SRTP proves to be a suitable protection for heterogeneous environments, 
	i.e. environments including both wired and wireless links.

	------------------

       "Design Criteria for Multimedia Session Key Management in Heterogeneous Networks"
        <draft-blom-mm-kmgt-00.txt>

	Abstract:
	For conversational multimedia to take off, many important aspects
  	have still to be fully investigated. The security framework is one of
 	them. While some proposals on how to secure the media traffic have
 	appeared, a key management solution has still to be developed. It
  	should take into account the conversational multimedia type of
  	scenario and an heterogeneous communication environment, in which
  	thin clients are used. Such a scenario will result in a number of
   	challenging requirements. The purpose of this document is to describe
  	the scenario and to list constraints and requirements on a key
  	management scheme for media traffic in conversational multimedia.

         ----------------

         "Key Management for Multimedia Sessions"
          <draft-carrara-mm-kmgt-sol-00.txt>

	Abstract:
	Some work for securing real-time applications have started to appear,
   	and it has also brought the need for a key management infrastructure
  	to support the security protocol. Such key management has to fulfil
   	requirements suitable for conversational multimedia in heterogeneous
  	environment.

   	This document describes a key management scheme that can be used for
   	real-time applications, and shows some examples of how such scheme
  	can be implemented.

           -----------------------------------------------------------------------------------------------------------

=======================
Elisabetta Carrara
Ericsson Research, Sweden
+46 850877040
=======================

_______________________________________________
msec mailing list
[email-masked]
http://www.pairlist.net/mailman/listinfo/msec