1. SPI 2003 Secure Audio and Video Conferencing system Jaroslav Dočkal, Tomáš Bouček, Petr Dušek, Tomáš Koníř

2. Current status ● Many audio/video conferencing systems ● Many incompatibile protocols (some are proprietary) ● Not secured: – No authentication – No authorization – No secured data over transfer

5. Our Goal ● Find suitable solution based on multicast or similar ● Improve existing solution (add the security parts) ● Security funcions MUST NOT affect the usability ● Our solution must be able to run on the most commonly used platforms.

6. Software we used as basement ● Audio and video conferencing tools, based on packet reflector technology ● Programs, named VIC (video conferencing tool) and RAT (robust audio tool) Packet Reflector Client AClient B Client C

7. Security model ● Add one security module to each client ● Not modify existing client ● Rewrite the packet reflector Packet Reflector Module AModule B Module C Client A

8. Server improvements ● Use authentication ● Key generation and distribution ● User authorization

9. What to do now? ● Login / password –> X.509 digital certificates ● Attribute certificates ● User – friendly interface

10. Thank you for patience Questions ?