Secure Multicast Content Delivery with Relevant Security and Real Privacy Management (RPM™)

Challenges
Today, decisions are information driven and supporting systems use ever increasing amounts of data. Whether protecting secrets or securing intellectual property, dissemination of data quickly, efficiently, reliably, and securely is critically important. Many businesses and industries find themselves in need of secure and reliable multicast content distribution, but struggle to find security products that meet all of these criteria. Traditional technologies can be used, such as VPN, file encryption, or encrypted multicast, however these options do not properly address the particular issues faced in securely delivering content to multiple destinations.

Existing Technologies
Standard VPN technologies scale well for IP uni-cast traffic, however these solutions prove to be inefficient for content delivery because data must be encrypted separately for each connected client. Hardware resource and administrative requirements increase indefinitely with added clients. This approach may be impractical or impossible for broad distribution and/or large quantities of data, particularly when the delivery is regularly occurring, such as is the case with broadcast media, field data, and other continuous information sources.

Encrypted multicast protocol provides the low delay and high efficiency that is lacking in the above options, but includes a weakness shared with the encrypt?then? transfer approach. Information is encrypted with the same key for every client. This presents multiple weaknesses. First, the potential for an attacker to subvert the system by compromising a single client is greater, since the encryption key is shared system?wide. Also, because the encrypted data is being broadcast on multiple vectors, there is a greater surface area for an attack by analyzing the encrypted data.

Existing approaches don’t provide a complete solution. Each method outlined exhibits weakness of security, falls short from a performance standpoint, or fails completely to address the needs of a secure content delivery mechanism. What is needed is a truly new approach to securing broadcast data that is reliable, high performance, and resource efficient.

The Solution: Relevant Security and RPM™
Relevant Security offers the RS security appliances utilizing its patented RPM technology to create the most secure network for the transmission of data, voice, and video on the market.

Combining the flexibility and scalability of a Linux based OS and RPM technology, Relevant Security has developed a secure network appliance which revolutionizes network security. Relevant Security’s network appliances not only encrypt all data but also provide strong continuous mutual authentication between the RS appliances at the transmission level allowing users to know for certain their data is secure. The combination of continuous mutual authentication of devices as well as encryption of every transmission provides the strongest security for data in transit.

RP is built on top of the very secure AES encryption standard, used by the US Government. AES provides strong data security using 128, 192, or 256 bit encryption keys. The addition of RPM allows a data stream to be encrypted using a new key for each packet or datagram with minimal network and hardware overhead. RPM adds only 5% processing time to each round of encryption. This unique feature of RPM greatly enhances the security of multicast encryption.

RS Multicast from Relevant Security uses RPM to ensure that every multicast datagram is transmitted with a fresh encryption key that is used only once. This means, for example, that a 10GB file when transferred using Secure Multicast will contain over 7.4 million datagram’s, each encrypted with a unique key. In comparison, the standard VPN approach with 100 clients would yield only 100 unique keys for the same transmission, while greatly increasing the performance overhead since each client’s data stream must be encrypted separately. Applying AES encryption to the multicast broadcast without RPM would yield only one distinct encryption key for the entire transmission.

Rather than changing keys per client to increase data entropy, RS Multicast rotates keys per transaction. This approach combines the performance and efficiency benefits of multicast, and the security of a VPN tunnel to create a robust new approach to secure content delivery. By utilizing Relevant Security’s RPM and the flexible multicast transfer features of the OS, Relevant Security is able to offer complete security for content delivery at any scale.

Download Secure Multicast Content Delivery PDF

Get RPM for your application