System and method of updating key based on communication cost and security damage cost
A system and method of updating a key based on communication and security damage costs are provided. The key updating system for group communication between a plurality of group members, includes a key update cycle determining unit to determine a key update cycle based on a communication cost and a security damage cost, and a key updating unit to perform a key updating with respect to one or more group members of the group communication based on the determined key update cycle.
1. A key updating system for group communication between a plurality of group members, the key updating system comprising:
a key update cycle determining unit comprising:
a communication cost calculating unit configured to calculate a communication cost based on a Poisson distribution using a variation rate of group members having left from the group communication, the cost per key update message, and the number of key update messages; and
a security damage cost calculating unit configured to calculate the security damage cost based on an exposed time during which the group communication is exposed to a group member having left from the group communication; and
a key updating unit configured to perform a key updating with respect to one or more group members of the group communication based on the determined key update cycle, wherein the key update cycle determining unit and the key updating unit are implemented by hardware.
2. The key updating system of claim 1 , wherein the number of key update messages corresponds with an average number of the key update messages, the average number of the key update messages being calculated based on an expectation value of a number of sub trees including group members having left from a tree structure in which group members in the same level have the same degree.
3. The key updating system of claim 1 , wherein the security damage cost calculating unit calculates the security damage cost based on a preceding key update time and a maximum exposed time of exposed times, and the exposed time is determined based on a time when the group member leaves from the group communication and the following key update time.
4. The key updating system of claim 1 , wherein the security damage cost calculating unit calculates the security damage cost based on difference between a preceding key update time and the following key update time, and the exposed time, and the exposed time is determined based on a time when the group member leaves from the group communication and the following key update time.
5. The key updating system of claim 1 , wherein the key update cycle determining unit further comprises:
a weight value giving unit configured to give a weight value to each of the communication cost and the security damage cost; and
a key update cycle calculating unit configured to calculate the key update cycle based on an operation between the communication cost and security damage cost to which the respective weight values are given, wherein the weight value giving unit and the key update cycle calculating unit are implemented by hardware.
6. The key updating system of claim 1 , wherein the key update cycle determining unit comprises:
a leave message receiving unit configured to receive a leave message from a group member having left from the group communication; and
a key update cycle calculating unit configured to calculate the communication cost and the security damage cost based on the number of received leave messages to thereby calculate the key update cycle, wherein the leave message receiving unit and the key update cycle calculating unit are implemented by hardware.
7. The key updating system of claim 1 , further comprising:
a variation rate calculating unit configured to calculate a variation rate of group members having left from the group communication based on a leave message received from the group member, wherein the variation rate calculating unit is implemented by hardware.
8. The key updating system of claim 7 , wherein the key update cycle determining unit calculates the security damage cost based on the variation rate and a communication cost constant to thereby determine the key update cycle and the communication cost constant is a cost per unit time.
9. The key updating system of claim 1 , wherein the key updating unit transmits, to the key update cycle determining unit, information about a time during which the key updating is performed, and the key update cycle determining unit determines a preceding key update cycle according to the time during which the key updating is performed.
10. The key updating system of claim 1 , wherein the exposed time is determined based the following key update time subtracted from a time when the group member leaves from the group communication.
11. A key updating method for use in group communication between a plurality of group members, the key updating method comprising:
determining a key update cycle based on:
a communication cost determined based on a Poisson distribution using a variation rate of group members having left from the group communication, the cost per key update message, and the number of key update messages, and
a security damage cost determined based on an exposed time during which the group communication is exposed to a group member having left from the group communication; and
performing a key updating with respect to one or more group members of the group communication based on the determined key update cycle, wherein the determining operation, the performing operation, or any combination thereof is performed by hardware.
12. The key updating method of claim 11 , wherein the determining of the key update cycle further comprises:
giving a weight value to each of the communication cost and the security damage cost; and
calculating the key update cycle based on an operation between the communication cost and security damage cost to which the respective weight values are given.
13. The key updating method of claim 11 , wherein the determining of the key update cycle comprises:
receiving a leave message from a group member having left from the group communication; and
calculating the communication cost and security damage cost based on the number of received leave messages to thereby calculate the key update cycle.
14. The key updating method of claim 11 , further comprising:
calculating a variation rate of a group member having left from the group communication based on a leave message received from the group member,
wherein determining of the key update cycle comprises calculating the communication cost and the security damage cost based on the variation rate to thereby determine the key update cycle.
15. A non-transitory computer-readable storage medium storing a program to update a key in group communication between a plurality of group members, comprising instructions to cause a computer to:
determine a key update cycle based on:
a communication cost determined based on a Poisson distribution using a variation rate of group members having left from the group communication, the cost per key update message, and the number of key update messages; and
a security damage cost determined based on an exposed time during which the group communication is exposed to a group member having left from the group communication; and
perform a key updating with respect to one or more group members of the group communication based on the determined key update cycle.