用于互联网多媒体通信的SIP安全方案  

SIP Security Scheme of Internet Multimedia Communication

作　　者：胡金龙[1,2] 张凌[1] 许勇[1] 叶昭[1,2] 

机构地区：[1]华南理工大学广东省计算机网络重点实验室,广东广州510640 [2]华南理工大学信息网络工程研究中心,广东广州510640

出　　处：《华南理工大学学报（自然科学版）》2012年第4期1-7,共7页Journal of South China University of Technology(Natural Science Edition)

基　　金：国家"973"计划项目(2009CB320505);国家科技支撑计划项目(2008BAH37B02;2008BAH37B08)

摘　　要：针对传统基于软件的SIP安全方案容易被盗用、欺骗和入侵的问题,结合可信计算技术,设计了对终端系统与用户身份的双层认证结构,提出了一种使用SIP进行互联网多媒体通信的安全方案.该方案利用可信平台模块和直接匿名证明算法设计了新的SIP注册协议,提高了多媒体通信系统的安全性.文中还利用可证明安全模型证明了注册协议的安全性,并对整个方案的特点进行了分析.As the traditional software-based SIP security schemes are vulnerable to embezzlement, deception and invasion, a dual authentication framework combined with the trusted computing technology is proposed for endpoint system and user identity. Then, a new SIP security scheme for Interuet multimedia communication is presented, which takes advantage of the trusted platform module and the direct anonymous attestation algorithm to design a new registration sub-protocol for improving the security of multimedia communication systems. Moreover, the security of the registration sub-protocol is verified by using the provable security model, and the characteristics of the whole scheme are finally analyzed.

关 键 词：互联网多媒体通信 安全性 会话初始协议 可信计算 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术]