Sichere Videokommunikation fuer Multimedia Collaboration Teleservices (MMC). Teilvorhaben: Sicherheitsaspekte Schlussbericht

Abstract

1. Current State: The running system is the only one we know, including security services. The method providing the security are state of the art. Goal of the Project: The goal was introducing security into a running conference system without disturbing it to much. It was evaluated whether it is possible to build a security envelope around a system or not to achieve this goal. During the project it was also evolved which features are required and how they can be introduced into the system. 2. Methods: In order to define what methods are necessary a security profile was developed. Well known security methods were tested whether they fit to the profile or not and implemented prototypically. During the development of the system new methods were checked and compared to the implemented ones. To avoid unnecessary work, similar methods were reused for similar tasks. 3. Results: The conference system fulfils all the requirements that where specified. It provides a prototypical implementation of a secure multimedia conference system. This conference system enables the user to choose between several security policies and changing security levels during a running conference. It is possible to change these levels without changing the system itself. It was taken care to enable easy enhancements to the crypto algorithms used. During the project problems came up because the unsecure MMC did not take into account security in the specification and design of the system. Following recommendation can be derived: trying to introduce security into a system later on, is only meaningful if the system at least has design options to do so. If not it is better to implement a system from the scratch. 4. Conclusion: We suggest to develop a new conference system, based on the results of this project. A diploma thesis trying to develop first specifications is currently worked on at the PRZ. The developed prototype is designed to use broad band networks. Since most of the customers are unable to pay a broad band network to run a conference system on, it should be one goal of a new project to develop a system that runs on whatever net configuration a customer might have. (orig.)SIGLEAvailable from TIB Hannover: DtF QN1(74,43) / FIZ - Fachinformationszzentrum Karlsruhe / TIB - Technische InformationsbibliothekBundesministerium fuer Bildung, Wissenschaft, Forschung und Technologie, Bonn (Germany)DEGerman