Postscript document

next up previous
Next: Group Merge Protocol Up: Protocols Previous: Member Leave Protocol

Group Partition Protocol

 

A network fault can cause a partition of the group. To the remaining members, this actually appears as a concurrent leave of multiple members. With a minor modification, the leave protocol can handle multiple leaving members in a single round. The only difference is the sponsorselection. In case of a partition, the sponsoris the leaf node directly below the lowest-numbered leaving member. (If M1 is the lowest-numbered leaving member, the sponsoris the lowest-numbered surviving member.)

After deleting all leaving nodes, the sponsorMs refreshes its session random (key share), computes keys and blinded keys going up the tree - as in the plain leave protocol - terminating with the computation of kn-1 p. It then broadcasts the updated key tree BTs containing only blinded values. Each member including Ms can now compute the group key.

The computation and communication complexity of the partition protocol is identical to that of the leave protocol. The same holds for its security properties.


next up previous
Next: Group Merge Protocol Up: Protocols Previous: Member Leave Protocol

Adrian Perrig
Sat Mar 31 16:41:33 PST 2001