基于SIP的P2P VoIP系统的安全通信机制  

Secure communication scheme for SIP-based P2P VoIP system

作　　者：施苑英[1] 

机构地区：[1]西安邮电学院通信与信息工程学院,陕西西安710121

出　　处：《西安邮电学院学报》2011年第3期9-13,共5页Journal of Xi'an Institute of Posts and Telecommunications

基　　金：西安邮电学院中青年基金项目(ZL2010-13)

摘　　要：针对基于SIP的P2P VoIP通信面临的安全威胁,提出一种身份认证与数据加密相结合的安全解决方案。利用无证书签名技术实现用户注册和呼叫握手时的双向认证,确保了用户身份的真实性。同时采用改进的Diffie-Hellman算法进行会话密钥的协商,以完成语音信息的加解密。与现有基于数字证书的方法相比,该方案降低了对终端计算、存储能力的需求,减少了证书传递引起的通信开销。安全性分析表明,该方案能够有效抵御通信中的多种攻击。To overcome the security threats in SIP-based P2P VoIP communications,a secure communication scheme based on authentication and data encryption is proposed.In this scheme,mutual authentication based on certificateless signature performs in the process of user registration and session establishment.Thus,the authenticity of users is ensured.At the same time,a modified Diffie-Hellman protocol is employed to arrange the session key to encrypt/decrypt voice data.Compared with the existing method based on digital certificate,the new scheme can reduce the requirement of computation and storage in mobile terminals as well as the communication cost of certificate transmission.Security analysis shows that this scheme can effectively resist a variety of attacks.

关 键 词：会话初始协议 对等式VoIP 双向认证 密钥协商 无证书签名 

分 类 号：TN915.08[电子电信—通信与信息系统]