網際網路上之安全群組通訊系統之設計

Abstract

隨著網際網路的快速發展，一對多的群組通訊需求日益增加。然而，目 前的群組軟體幾乎都局現在區域網路內使用。因此，本論文即根據此一需 求及網際網路的環境，設計出一套實用的使用者層次網際網路群組通訊系 統。在這套系統中，我們提供了互相身分確認協定與一個利用 (m, n) threshold scheme 而設計的有效率權力回收方法(privilege revocation) 達成安全上的需求。在設計這套系統時，我們依據現實環境 將群組切割成數個較小的區域群組，此外，我們做了許多實作上的考量， 而且重要的程式界面皆已訂定。 With the rapid development of the Internet, the demand of thepoint-to-multipoint connection increases. However, most existing groupwareis limited to be used in the local area network. In this thesis, we proposea practical system model for user-level group communication on the Internet.In this system, security is ensured by applying the proposed authenticationprotocol and efficient privilege revocation algorithm based on (m, n)threshold scheme. The group in this system is divided into local subgroupsaccording to the actual environment of the Internet. Many implementationissues have been taken into consideration when designing this system, andthe main application programming interfaces (APIs) have been defined.