基于Hash链的SIP服务实时支付方案  

The scheme of real-time payments for SIP services based on a hash chain

作　　者：郝建国[1] 邹嘉[1] 戴一奇[1] 

机构地区：[1]清华大学计算机科学与技术系,北京100084

出　　处：《清华大学学报（自然科学版）》2009年第4期581-585,共5页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(60673065);江苏省网络与信息安全重点实验室项目(BM2003201)

摘　　要：针对已有SIP(session initiation protocol)服务支付方案的缺陷,提出了一种基于Hash链的SIP服务实时支付方案——SIPCoin。SIPCoin充分利用了Hash链高效、不可逆的良好特性,通过对SIP协议的简单扩展和一个根据标准设计的新的支付消息流程,将基于Hash链的微支付机制和SIP会话的建立、管理流程有机结合起来,可实现安全的SIP服务实时支付。分析表明,相比已有的SIP服务支付方案,SIPCoin不仅具有高效、实时和可扩展的良好性能,而且支持电子货币防伪等安全特性,可抵御SIP服务支付中常见的重放攻击和中间人攻击等。The problems with present payment schemes for SIP services are overcomed with a real-time payment scheme for SIP services based on hash chains, SIPCoin. SIPCoin takes advantage of the efficiency and irreversibleness of the hash chain to improve performance. The scheme uses a simple extension to SIP and a standard payment message flow integrated with the hash chain-based micro-payment mechanism, and the SIP session establishment and management process to realize secure real-time payments for SIP services. SIPCoin is more efficient, has better real-time performance and extensibility, and can secure electronic currency from forgery and thievery. The scheme can defend against the common attacks during payments for SIP services, such as replay and man-in-the-middle attacks.

关 键 词：SIP服务 实时支付 HASH链 电子支付 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术] TP393.08[自动化与计算机技术—计算机科学与技术]