@techreport{ietf-msec-tgsakmp-00, number = {draft-ietf-msec-tgsakmp-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-ietf-msec-tgsakmp/00/}, author = {Hugh Harney}, title = {{Tunneled Group Secure Association Key Management Protocol}}, pagetotal = 52, year = 2003, month = may, day = 20, abstract = {The Tunneled Group Secure Association Key Management Protocol (T-GSAKMP) provides a security framework for creating cryptographic groups on a network. It is designed to provide key distribution services under the cryptographic protection of a pairwise SA, like IPSec. T-GSAKMP relies on the pairwise SA to provide data confidentiality services for policy, DoS mitigation services, and protection from 'man-in-the-middle' attacks. It provides mechanisms to disseminate group security policy, perform access control based upon PKI certificates, generate group keys, and recover from compromise. This framework addresses group scalability issues by facilitating delegation of process-intensive actions in a secure and controlled manner.}, }