基于改进SIP协议的SIP网络安全通信模型  

Safe communicated model of SIP network based on improved SIP protocol

作　　者：张兆心[1] 方滨兴[1] 张宏莉[1] 姜春祥[2] 

机构地区：[1]哈尔滨工业大学计算机网络与信息安全技术研究中心,黑龙江哈尔滨150001 [2]黑龙江省通信管理局,黑龙江哈尔滨150001

出　　处：《通信学报》2007年第12期39-47,共9页Journal on Communications

基　　金：国家自然科学基金资助项目(60403033);国家高技术研究发展计划("863"计划)基金资助项目(2006AA01Z451);哈尔滨工业大学(威海)研究基金资助项目(200712)~~

摘　　要：通过对SIP协议安全性的深入研究,结合PKI技术、数字时间认证技术、数字证书及SIP网络的特点提出了基于改进SIP协议的SIP网络安全通信模型。借鉴原有的协议流程制定了新的呼叫建立子协议,重新制定了注册子协议和漫游注册子协议,增加了时间同步子协议和密钥协商子协议,并在实际环境下对该模型进行时间延迟测试。实验结果表明该模型在有效提高SIP网络机密性、完整性、可用性、抗否认性和新鲜性的同时所带来毫秒级的时间延迟是可接受的。Through analyzing the security of SIP, combining PKI technology, digital time authentication, digital certificate and the characteristic of SIP network, the safe communicated model of SIP network based on improved SIP protocol was put forward. New call established protocol was constituted used the primary flow for reference, new register protocol and roam register protocol were constituted, time synchronization protocol and negotiating key protocol was added for this model, and test the safe communicated model in real circumstance. The result of the experiment proved that this model improved the confidentiality, integrality, usability, non-repudiation and novelty of the SIP network with the millisecond delay which can be accepted.

关 键 词：网络安全 SIP 安全通信模型 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]