• Journal of KIISE:Computing Practices and Letters
• /
• v.15 no.12
• /
• pp.998-1002
• /
• 2009

In IPTV multicast architecture, the IGMP(Internet Group Management Protocol) is used for access networks. This protocol supports the functionality of join or leave for a specific multicast channel group. But, malicious attackers can disturb legitimate users being served appropriately. By using spoofed IGMP messages, attackers can hi-jack the premium channel, wasting bandwidth and exhausting the IGMP router's resources. To prevent the message spoofing, we can introduce the packet-level authentication methods. But, it causes the additional processing overhead to an IGMP processing router, so that the router is more susceptible to the flooding attacks. In this paper, we propose the two-level authentication scheme in order to mitigate the IGMP flooding attack.

• Journal of KIISE:Information Networking
• /
• v.29 no.2
• /
• pp.197-203
• /
• 2002

This paper proposes a new agent based mechanism called a Multicast Handoff Agent (MHA) to reduce handoff latency for IP multicast. The MHA acts as a proxy for an Internet Group Management Protocol (IGMP) of Mobile Nodes (MNs) at each Base Station (BS) and keeps information for members of multicast groups in a cell. When an MN moves to a next cell, the MHA immediately sends unsolicited reports without waiting for the IGMP query. The mechanism was evaluated through simulation and analysis and compared with the IGMPv2 for micro-mobility and the IGMP traffic. Simulation results show that handoff latency for micro-mobility can be largely reduced and the IGMP control traffic on the wireless links during the duration of membership can be eliminated. Thus, this mechanism is superior to the existing mechanism in both micro-mobility and battery duration, as the need not to reply to a query conserves battery power.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.17 no.2
• /
• pp.3-17
• /
• 2007

Receiver access control scheme is proposed to protect multicast distribution tree from DoS(Denial-of Service) attack induced by unauthorized use of IGMP(Internet group management protocol), by extending the security-related functionality of IGMP. Based on a specific network and business model adopted for commercial deployment of IP multicast applications, key management scheme is also presented for bootstrapping the proposed access control as well as accounting and billing for CP(Content Provider), NSP(Network Service Provider), and group members.

• Proceedings of the Korean Information Science Society Conference
• /
• 2000.04a
• /
• pp.478-480
• /
• 2000

멀티캐스트 전송 필요성이 커지면서 보안에 대한 요구도 높아지게 되었다. 멀티캐스팅 라우터와 호스트간 그룹에 대한 정보를 관리하기 위해 사용되는 IGMP는 자체의 취약점이 있어서 DoS 공격이 가능하다. 본 논문에서는 이러한 IGMP 취약점과 예상되는 DoS 공격 유형을 살펴보고, 취약점 최소화를 위한 방법으로 트래픽 비율 제한 및 새로운 상태와 타이머 사용의 간단하면서도 효과적인 기법을 제안한다. 이를 위하여 라우터에 대한 하나의 상태와 네 가지의 타이머를 새로이 정의하고 동작 특성을 설명한다.

• Journal of the Institute of Electronics Engineers of Korea TC
• /
• v.42 no.6 s.336
• /
• pp.9-16
• /
• 2005

In this paper, we focus on supporting the convergence of broadcasting and communication in home network systems with E-PON based home gateway. We propose a new architecture to provide broadcasting and data services in integrated home network using overlay transport mechanism in access network and If multicast techniques of IGMP and IGMP snooping in home network. We also detail a set of mechanisms and procedures for home broadcasting service through the home gateway system. Our new scheme is composed of three parts: a) an overlay transmission model of video broadcasting signals (satellite and/or cable TV) and Internet data, b) to select a specific video broadcasting channel and to make of the selected video broadcasting stream into IP multicast packets in tuner/conversion module using multiple tuner system and c) to transfer the converted If multicast packets to L2 switch of home gateway's core module and to send them out to target port(s) by L2 multicast using IGMP snooping.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.15 no.2
• /
• pp.77-85
• /
• 2015

This paper presents our performance evaluation after the way of minimizing waiting times between channel switching for eMBMS(evolved Multimedia Broadcast/Multicast Services) technique in LTE-Advanced systems. Existing composition of MBMS using IGMP(Internet Group Management Protocol) transfers the data with Multicast from BM-SC(Broadcast Multicast Service Center) to eNB(evolevd Node B) and with Broadcast from eNB to UE(User Equipment). Therefore, in case of channel switching, IGMP Join report should be transferred to BM-SC and then wait user's contents to be retransferred from eNB. To achieve this, Subscriber Channel technique of priorities is used for minimizing waiting times between channel switching as UE broadcasts favorite channels in advance.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2011.04a
• /
• pp.927-930
• /
• 2011

위성이나 케이블을 통해서 이루어지던 유료 방송 서비스가 최근에는 IPTV 라는 이름 아래 인터넷을 통해서 이루어지고 있다. IP 네트워크를 통해 콘텐츠가 전송되면서 네트워크의 대역폭을 효율적으로 사용하기 위해 멀티캐스트를 통해 이루어진다. 멀티캐스트는 IP 환경에서 동일한 내용의 데이터를 여러명의 특정한 그룹의 수신자에게 동시에 전송하는 것을 말하며, 이때 그룹을 관리하기 위해 인터넷 그룹 관리 프로토콜(Internet Group Management Protocol, IGMP)이 사용된다. IGMP에는 접근제어와 같은 보안 기능을 제공하지 않고 있으며, IPTV와 같은 유료 방송 서비스에서는 멀티캐스트를 통해 전송 되는 콘텐츠를 보호하기위해 접근제어시스템(Conditional Access System, CAS)을 사용한다. 그러나 CAS를 통해 콘텐츠를 보호 하더라도, IGMP에는 보안 기능이 없다는 근본적인 문제에 의해 사용자의 TV 시청을 방해할 수 있다는 가능성이 남아있다. 본 논문에서는 이러한 문제를 해결하기 위해 CAS가 운영되면서 교환된 키를 사용해 IGMP메시지에 보안기능을 추가한 기법을 제안한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2004.05a
• /
• pp.1585-1588
• /
• 2004

이동 단말의 수요가 급증하고 무선 인터넷 환경이 널리 보급되면서 무선 멀티캐스트 환경의 필요성이 커지고 있다. 이를 위해 유니캐스트와 마찬가지로 핸드오프를 위한 프로토콜로 양방향 터널링과 원격 가입이 제시되고 있다. 하지만, 이들 프로토콜은 각각 데이터 전달 경로의 최적성과 실시간성에 있어서 문제점을 가지고 있다. 따라서 원격 가입 지연 시간을 최소화 시키기 위해 핸드오프 발생시 빠르게 그룹 참가 메시지를 보내도록 IGMP 를 수정하고 이를 직접 리눅스 커널에 구현 및 실험해 보았다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2001.10c
• /
• pp.307-309
• /
• 2001

In this paper, we present a scheme for the improving reliable transport and the efficient multicast support in mobile environment. The proposed scheme solves a problem of TCP layer resulted from mobility by using a Representative FA. RFA has a mechanism like a snoop module which has a cache and can provide retransmission of a multicast packet lost and solve the rock implosion problem. Also, we present an additional IGMP message. By using it, We can remove a delay for IGMP query cycle and serve a multicast service more promptly.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.33 no.4B
• /
• pp.224-231
• /
• 2008

EPONs are a low cost, high speed solution to the bottleneck problem of broadband access networks. To support point-to-point and shared LAN emulation, EPONs use the multi-point control protocol (MPCP), which uses logical link identification (LLID) for frame tagging and filtering between the OLT and ONUs. In this paper, ONU-based multicast or multiple shared LAN emulation is used for IPTV channel package delivery services. Using ONU-based VLAN services, EPONs can support separate and secure connections between providers and subscribers in a simple manner. Also, IPTV channel packages can be delivered through EPONs by implementing ONU-based VLAN and IGMP snooping mechanisms. By showing fast channel zapping time of proposed architecture, I show that EPONs is suitable for IPTV channel package delivery service.