SIP中基于身份认证的安全机制研究  

Research on Identity-Based Authentication in SIP

作　　者：吕武玲[1] 黎忠文[1] 

机构地区：[1]厦门大学信息科学与技术学院计算机科学系,福建厦门361005

出　　处：《计算机技术与发展》2009年第2期158-161,共4页Computer Technology and Development

基　　金：福建省2004年自然科学基金(A0410004);厦门大学院士基金(0630-E23011);厦门大学新世纪优秀人才基金(0000-X07116)

摘　　要：因为简单、灵活和易扩展等特点,SIP将在3GPP中得到广泛应用,但是SIP本身缺少有力的安全机制使其面临很多安全威胁。文中对SIP中的安全问题和安全性要求进行分析,为了解决SIP中认证和消息加密的问题,把基于身份认证这种结构简单、应用容易的安全机制引入到SIP协议中,提出了一种新的认证加密方法。采用基于身份的加密机制使系统初始化简单,不需要繁琐的密钥协商步骤,并且维护容易。同时满足了SIP的安全要求,保证了会话建立和消息通信过程中的完整性、可靠性和不可抵赖性。SIP will be widely applied in 3GPP, because of its simplicity, flexibility and scalability. But a lack of powerful security mechanism, lead it to face many security threats. In this paper,analyse the issues existed and the requirements needed in SIP security mechanism. In order to solve the problems in SIP authentication and information encryption, proposed a new method about authentication by involving identity-based encryption, a security mechanism which has simple architecture and is easy to apply, to the SIP .security mechanism. It makes the construction of the system easier. There is no need of complex steps about key agreement, and it is easy to maintain. At the same time it meets the safety requiremems of SIP to ensure that the integrity, reliability and incontestability in the process of session establishment and messaging conversation.

关 键 词：SIP协议 安全 身份认证 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]