Abstract

The Dynamic Cryptographic Context Management DCCM project efficiently provides security for very large, dynamically changing groups of participants. The DCCM system has two novel distinguishing characteristics. First, policy plays a key role in DCCM. Groups at all levels have policies. These policies are represented, they are negotiated, and a cryptographic context - an unambiguous set of mechanisms and configuration - is created to make particular interactions possible subject to these policies. Second, DCCM implements a scalable key management system based on One-way Function Trees OFT that can handle group sizes up to 100,000 members and can dynamically handle members entering and leaving groups. This report culminates the research of the project by presenting the integrated architecture that has been developed and implemented to demonstrate the fulfillment of our research goals. Experimentation results with the system are also presented

Date

2000

Authors

David M Balenson, Peter Dismore, Michael Heyman, Peter S Kruus, Caroline Scace

Issue

AFRLIFRSTR2000161