Using IPSec for Secure Multicast Communications (Extended Abstract)

A key component of the IP Security architecture is the Internet Key Exchange Daemon (IKE). IKE is invoked to establish keys and security related parameters between hosts in order to protected the exchanged application data with them. The IKE concept can not be used for securing group communication based on IP multicast services since it is only addressed to pairwise security. For negotiation and controlled distribution of group security data and membership management the Multicast Internet Key Exchange (MIKE) is introduced. The appropriate daemon will be developed for to the use in military environment. This implies for the MIKE protocols that they are insensitive against packet loss and fulll special military conditions, e.g. the emission control mode (EMCON) of a user. This paper discusses the architecture and design for MIKE daemon which executes the management functions described above