Secure TCP/IP Broadcast/Multicast

Under the Phase I , Western DataCom developed an identity-based security architecture and a flexible key distribution system using identity-based security that can meet NSA approval. The system uses an in-band key distribution design enabling secure unicast and multicast operations at the network layer; re-keying both layer-2 and layer-3 multicast groups, as well as re-keying unicast keys. The design utilizes network infrastructure that will be common in future air, sea and ground combat systems. This system can incorporate a variety of multicast key distribution technologies and will allow the DoD to gain deployment experience with identity-based security, security policy distribution, location management, local name servers and certificate management databases in operational environments. This design can also be adapted to re-key legacy radio systems. During Phase II, Western DataCom will implement this design into Internet Protocol Encryptors and demonstrate all critical components of identity-based security and in-band multicast rekeying into a network testbed. In addition, definitions and updates of intrinsic intent of DOD policy /process for key/certificate distribution and policy management will be built into an architecture-based environment supporting persistence and reuse for analysis of alternatives based evaluation.