IPTV系统SRTP协议及密钥交换技术研究  

Study on SRTP and Key Exchange for IPTV System

作　　者：刘军[1] 

机构地区：[1]西南交通大学电气工程学院,四川成都610031

出　　处：《信息安全与通信保密》2013年第8期70-72,共3页Information Security and Communications Privacy

基　　金：铁道部科技研究开发计划;中国铁路总公司科技研究开发计划课题资助项目(编号:2012J007-A;2012J011-A;2013J003-C)

摘　　要：实时流媒体传输协议RTP为IPTV流媒体传输标准协议,存在易被攻击者利用的IP脆弱性。SRTP为RTP提供了安全配置文件,增加了端到端数据机密性、完整性保护。文中提出一种新的SRTP协议密钥交换机制并进行了具体实现,该方案可以让第三方获得会话密钥,提供可监管机制。实现过程为:在已有uctimclient、uctiptv构成的IMS IPTV开源系统基础上改进了信令功能,在SIP握手中实现了密钥交换;改进了RTP流媒体传输部分功能,在GStreamer RTP插件中集成了SRTP协议,完成了C/S应用中流媒体机密性、完整性保护。改进后的系统经实际测试,功能正常,证明SRTP及提出的密钥交换技术在IPTV领域具有一定的实用价值。RTP（Real-Time Transport Protocol） is the standard protocol for transmitting media streams in IPTV application, in which exist potential IP vulnerabilities easily exploitable by attackers. SRTP provides RTP with security configuration, including end-to-end confidentiality and integrity protection to RTP media streams. A new method for encryption keys exchange mechanism in SRTP is proposed and implemented. The method enables the third party to get the session key, and provides surveillance mechanism. The implementation process is described as follows： based on an open-source IMS IPTV system composed of uctimclient and nctiptv software; SIP capabilityis improved, and the key negotiating and exchanging function implemented in SIP handshake; meanwhile RTP , is enhanced, and SRTP incorporated in GStreamer RTP plugin, the confidentiality and integrity protection of RTP media streams in the C/S application achieved. The improved IPTV system works well, and this indicates that SRTP and the proposed key exchange method are feasible and effective for IPTV application.

关 键 词：SRTP DH算法 密钥交换 RTP 插件 

分 类 号：TN949.292[电子电信—信号与信息处理]