Multicasting reveals to the delivery of a message or information from one source to multiple recipients simultaneously through a single transmission channel. Securing the transmitted multicast information can be achieved through IPsec multicast architecture. The process of IPsec involves the sender and destinations to agree on IPsec keys. These keys are used for protection transmitted information among communicated peers over IPsec network. IPsec depends on classical algorithm for key generation and distribution. These algorithms proved their conditional security which means intruder can break the algorithm and intercept the communication process. In this paper, a new IPsec multicast architecture is proposed. The proposed architecture is divided into five main processes. The most important process is key generation and distribution. The key generation and distribution through IPsec multicast network is achieved using quantum algorithms. Quantum keys proved their unconditional security according to their physical characteristics. Sender and receivers communicate through two channels which quantum and classical. Encryption and decryption processes depend on agreed quantum keys and classical cryptographic algorithms. IPsec depends on quantum key distribution for creating keys for IPsec security associations. The confidentiality and authentication of proposed architecture is analyzed
Multicasting reveals to the delivery of a message or information from one source to multiple recipients simultaneously through a single transmission channel. Securing the transmitted multicast information can be achieved through IPsec multicast architecture. The process of IPsec involves the sender and destinations to agree on IPsec keys. These keys are used for protection transmitted information among communicated peers over IPsec network. IPsec depends on classical algorithm for key generation and distribution. These algorithms proved their conditional security which means intruder can break the algorithm and intercept the communication process. In this paper, a new IPsec multicast architecture is proposed. The proposed architecture is divided into five main processes. The most important process is key generation and distribution. The key generation and distribution through IPsec multicast network is achieved using quantum algorithms. Quantum keys proved their unconditional security according to their physical characteristics. Sender and receivers communicate through two channels which quantum and classical. Encryption and decryption processes depend on agreed quantum keys and classical cryptographic algorithms. IPsec depends on quantum key distribution for creating keys for IPsec security associations. The confidentiality and authentication of proposed architecture is analyzed
We reviewed the confidentiality and authentication for multi-party applications. A conceptual model of a secure multicast network has been presented by adding a quantum key distribution (QKD) network to its architecture. The model is divided into three phases, the first phase, QKD network generate secure keys to encrypt not only data but also authentication process. The second phase, authentication making sure that no one except the legitimate user receive the message and making sure that nobody except the legitimate sender writes or modifies it. In the last phase, Multicast network encrypt the data by secure key and send it to receivers. The proposed scheme amid to provide a secure end to end communication for multicast network.
Most existing realizations of quantum key distribution (QKD) are point-to-point systems with one source transferring to only one destination. Growth of these single-receiver systems has now achieved a reasonably sophisticated point. However, many communication systems operate in a point-to-multi-point (Multicast) configuration rather than in point-to-point mode, so it is crucial to demonstrate compatibility with this type of network in order to maximize the application range for QKD. Although encryption algorithms can be used to secure transmitted messages among group members, there are many security aspects for designing a secured multicast cryptosystem are needed to investigate. The most important aspects of multicasting are key generation and management. The researchers have proposed several approaches for solving problems of multicast key distribution and management. Therefore, we proposed four different architectures for implementing a multicast quantum key distribution with supportive protocols for generating and securing the transmitted messages among the communicated participants.
The need for communications networks is quite evident in the world today, multicasting has becomes a
major way of transferring digital data to huge number of audience. The advantages of multicast in
multi-party communications, such as saving bandwidth, simplicity and efficiency, are very essential
for new services that combine voice, video and text over Internet. It has many applications in online
multimedia and sensor networks and so on. The multicast networks distribute sensitive or private
information, therefore they must be provided via secure communication channels. In this paper, the
security of multicast network has been reviewed. A method has been presented to improve the security
of multicast network (SMN) using quantum key distribution (QKD) network. This technique protected
multicast network against internal and external impersonation. The QKD has been added to multicast
network architecture to generate the secure keys. The keys are in the authentication and encryption
processes. The proposed scheme aimed to provide a secure end to end communication for multicast
network.
Most existing realizations of quantum key distribution (QKD) are point-to-point systems with one source transferring to only one destination. Growth of these single-receiver systems has now achieved a reasonably sophisticated point. However, many communication systems operate in a point-to-multi-point (Multicast) configuration rather than in point-to-point mode, so it is crucial to demonstrate compatibility with this type of network in order to maximize the application range for QKD. Therefore, this chapter proposed architecture for implementing a multicast quantum key distribution Schema. The proposed architecture is designed as a Multicast Centralized Key Management Scheme Using Quantum Key Distribution and Classical Symmetric Encryption. In this architecture, a secured key generation and distribution solution has been proposed for a single host sending to two or more (N) receivers using centralized Quantum Multicast Key Distribution Centre and classical symmetric encryption.
The integrity and confidentiality of the multilevel security communication are guaranteed by using the key obtained from key negotiation process. To ensure the safety of this process is very important. The quantum key distribution process is unconditionally secure. This paper uses this process to distribute the authentication keys and the session keys, which are used in IPSec process. Thus, the method to realize multilevel secure communication by using quantum key and IPSec is given. It adds a field to implement the control strategy based on the security of the packet, uses a key effective time to meet the different security requirements, and uses the “one-time-pad” algorithm to provide unconditional security. After the rules of using keys are given, the process of transmitting data packets is described.
IPSec is a widely used network security protocol that plays a crucial role in providing secure transmission channels in the current Internet. However, the advent of quantum computing poses unprecedented challenges to the security of traditional cryptographic methods, including those used in IPSec. Fortunately, quantum key distribution (QKD) offers a theoretically unbreakable method for exchanging keys between two communicating parties. To address the security threats posed by quantum computing, we propose IPSeQ, a security-enhanced IPSec protocol that integrates QKD into its design. Specifically, IPSeQ leverages quantum keys to strengthen key negotiation, authentication, and data encryption processes. To achieve rapid key updates while ensuring transmission efficiency and key synchronization, IPSeQ introduces a sliding window-based dynamic key updating mechanism. Experiments conducted with real QKD devices demonstrate that our proposed mechanism can improve throughput by more than 50 percent compared to traditional schemes, particularly at higher quantum key generation rates. Additionally, IPSeQ effectively maintains robust data transmission in scenarios where quantum keys are scarce (e.g., when the key generation rate is less than 10 kb/s).