P2P-SIP网络通信安全方案  

Security communications algorithm in P2P-SIP network

作　　者：王庆磊[1] 张曦煌[1] 高炳贞[2] 

机构地区：[1]江南大学信息工程学院,江苏无锡214122 [2]南京邮电大学计算机学院,南京210003

出　　处：《计算机工程与应用》2010年第35期109-111,118,共4页Computer Engineering and Applications

摘　　要：P2P和SIP融合技术已经普遍应用于多媒体通信中,它解决了传统的SIP网络单点失效的问题。但是由于现有的P2P-SIP缺少有效的认证方案,给其带来很多安全隐患。现有的P2P-SIP网络的认证方案大多采用节点的真实ID,不能满足其匿名性的特殊要求。针对这个问题,提出了一种基于Diffie-Hellman算法的节点匿名认证方案DHB,该方案初始化阶段使用代理ID分发中心PIAC产生节点的假名。认证阶段采用改进的Diffie-Hellman算法和节点共享信息进行身份认证,实现了P2P-SIP中节点间的匿名认证。理论和实验分析表明,DHB可以有效抵御中间人攻击和猜测攻击,是一种安全有效的节点匿名认证方案。The integration of P2P and SIP is widely used in multimedia communication,which can resolve the problem of single-point failure in traditional SIP based network.Neverthelessl,ots of security problems appear because of the lack of ef-fective authentication.Most present P2P-SIP system authentications try to adopt peers’real ID,which can not meet the de-mand of anonymity of peers.In this paper,an anonymous authentication policy named as DHB based on Diffie-Hellman algo-rithm is proposed to cope with this problem.At the initialization stage of algorithm,DHB uses PIAC to generate peers’ pseudonymous name.At the authentication stage,peers’shared information and improved Diffie-Hellman algorithm are used to make certification between peers.The theoretical and experimental analysis shows that DHB is safe and effective,which can resist man-in-middle attack and key guessing attack.

关 键 词：会话初始化协议 通信安全 匿名 认证 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]