一种基于能力的轻量级SIP安全机制研究  

A lightweight Security Mechanism Research for SIP Based on Capabilities

作　　者：陆万顺[1] 符云清[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《网络安全技术与应用》2011年第3期64-67,共4页Network Security Technology & Application

基　　金：自然科学基金(60803027)部分资助

摘　　要：本文先简要概述了SIP应用背景和重要概念,然后详细分析了SIP面临的安全威胁以及现有安全解决方案,主要为安全认证和加密,讨论了几种典型方案的原理和不足。随后仔细研究了一种先进的基于共享用户密码进行密钥协商的轻量级的SIP安全认证、加密机制,并加入一次口令机制加以改进。随后借鉴了一种基于能力的IP-DOS控制思想,结合SIP本身特点,提出了一种能更好地限制SIP-DoS安全威胁的SIP-TVA。This article briefly outlines the application background and some important concepts of SIP at first, analyzing amply the common safety problems and existing solutions measures, with mainly the security authentication and encryption methods. And we also talk several typical solution discussing their principles and defects for each. Then, we made a detailed study for an advanced and lightweight security authentication and encryption scheme that is based on the shared user password for the key negotiation in the SIP network. After this, we join the one-time password mechanism to improve it. Subsequently, we anlehnung a thought that is for controlling the IP-DOS based on the capabilities, to propose one SIP-TVA for the better solutions and limiting for the SIP-DOS threat, combining with its own characteristics of the SiP.

关 键 词：SIP 安全认证 加密 轻量级 能力 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]