一种基于改进的HTTP摘要认证的SIP安全机制  

SIP security mechanism based on improved HTTP digest authentication

作　　者：彭焕峰[1] 

机构地区：[1]南京工程学院计算机工程学院,江苏南京211167

出　　处：《微型机与应用》2011年第6期53-55,共3页Microcomputer & Its Applications

基　　金：南京工程学院科研青年基金项目(QKJB2009026)

摘　　要：SIP协议是当前IP电话中的主流协议,HTTP摘要认证机制被很多SIP系统作为安全机制,但存在客户端不能认证服务器端,且不支持密钥协商的缺陷。为解决这一不足,提出了一种基于改进的HTTP摘要认证的SIP安全机制,使得SIP安全解决方案更加完善,部署更加灵活。SIP is the shortening of session initialization protocol. Many SIP systems use HTTP digest authentication mechanism as their security mechanism, but the client can not authenticate the server, and key agreement is not supported. This paper gives one security mechanism of SIP based on an improved HTTP digest authentication, this security mechanism resolves the defects above, and makes the security solution more perfect and flexible.

关 键 词：SIP HTTP摘要认证 安全机制 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]