基于HTTP摘要认证的SIP安全性设计  

Design of secure SIP based on HTTP digest authentication

作　　者：李学杰[1] 金志刚[1] 戴居丰[1] 

机构地区：[1]天津大学,天津300072

出　　处：《电子测量技术》2007年第12期109-111,115,共4页Electronic Measurement Technology

摘　　要：会话初始协议(SIP,session initiation protocol)因为具有简单性,较好的扩展性,且易于实现,近年来受到了业界的广泛支持。但是它的安全性存在一定问题,需要进行安全性增强,以适应不同的网络安全环境。本文通过对SIP协议及其传统的认证方法的深入分析,指出了应用传统认证方法可能面临的安全威胁。在此基础上,提出了一种新的基于HTTP摘要认证的安全认证方式,它继承了传统的HTTP摘要认证的优点,并且能够提供不同的安全级别,双向的身份认证和抵御批方式的暴力攻击的能力。实验表明,新方法可以提供较好的安全级别。Due to the characters of its simplicity and easy expandability and realization, Session Initiation Protocol （SIP） has obtained the broad support of the industry in recent years. Therefore its safety has attracted extra attention to the researchers. The paper briefly introduced and analyzed the frame of SIP and the traditional method of authentication for SIP, then pointed out security threats faced. With this understanding a new security authentication method based on HTTP Digest was given, which has inherited the advantages of traditional HTTP Digest authentication and can provide different security level, two-way authentication and the ability to withstand the violent batch attacks.

关 键 词：HTTP摘要认证 会话初始协议(SIP) 安全 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]