SIP的安全机制及其HTTP摘要认证的改进  

Security Mechanism of SIP and Improvement of HTTP Digest Authentication

作　　者：顾晓辉[1] 施佳佳[1] 郭放[1] 

机构地区：[1]东华大学信息科学与技术学院,上海201620

出　　处：《东华大学学报（自然科学版）》2010年第2期165-169,174,共6页Journal of Donghua University(Natural Science)

摘　　要：初始会话协议(SIP)在通信领域的应用越来越广泛,但是SIP本身缺乏完善的安全机制使其面临很多的安全威胁.首先分析了SIP面临的主要安全威胁及常见的解决方案,然后讨论了HTTP摘要认证的流程与缺陷,并提出一种改进的HTTP摘要认证,最后结合实验室的软交换系统,实现了改进后的认证方法在软交换系统中的应用开发.The Session Initiation Protocol（SIP） is widely used in the field of communication.But SIP faces a lot of security threats because it lacks effective security mechanism.First,the threats which SIP should encounter and their solutions are analyzed.Second,the process of HTTP digest authentication and its shortcomings are discussed.Accordingly,an improved HTTP digest authentication is put forward.At last,the development of an improved HTTP digest authentication is realized in soft switch system.

关 键 词：初始会话协议(SIP) 安全 HTTP摘要认证 软交换 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]