基于强认证技术的会话初始协议安全认证模型  

SIP secure authentication model based on strong authentication technology

作　　者：娄悦[1] 施荣华[1] 曹龄兮[1] 

机构地区：[1]中南大学信息科学与工程学院,湖南长沙410075

出　　处：《计算机应用》2006年第10期2332-2335,共4页journal of Computer Applications

基　　金：国家自然科学基金资助项目(60173041)

摘　　要：针对会话初始协议(SIP)的典型安全威胁,提出了基于强认证技术的SIP安全认证模型,并分析了其安全性。该认证模型通过智能卡和数字证书的强组合实现强认证,并据此对SIP做出相应扩展,将强认证技术有机地融入到SIP协议当中,实现了会话双方的安全认证,保证了SIP消息传输的机密性、真实性、完整性和不可否认性,从而提高了SIP的安全性。With regard to the representative security threats to SIP, Session Initiation Protocol（SIP） secure authentication model based on strong authentication technology was put forward, and its security was analyzed. The authentication model achieves strong authentication by combining smart card with digital certificate, extends SIP accordingly, and imports strong authentication technology into SIP. The model implements the duplex secure authentication of session, and ensures the confidentiality, authenticity, integrality and undertiability of SIP message transportation. As a result, it improves the security of SIP.

关 键 词：强认证 智能卡 数字证书 会话初始协议 RSA数字签名 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]