基于动态密钥的SIP授权认证机制的设计与实现  

The Design and Implementation of Authentication Mechanism of SIP Based on Dynamic Key

作　　者：章忠宪[1] 余兵[1] 顾亚丽[1] 

机构地区：[1]漳州职业技术学院计算机工程系,福建漳州363000

出　　处：《东莞理工学院学报》2013年第5期67-71,共5页Journal of Dongguan University of Technology

摘　　要：会话初始化协议(SIP)广泛应用在嵌入式移动终端设备中,但由于SIP协议本身特点使得其在复杂、开放的网络应用环境中容易被攻击者模仿、篡改。虽然已经提出了很多增强SIP协议安全性的认证机制,但由于认证过程计算性能消耗大,不适合在嵌入式设备中使用。在传统Http摘要认证的基础上,提出了一种基于动态密钥的认证机制,以较低的计算代价改进了SIP协议的安全性,对SIP协议在嵌入式设备中普及有一定的实用价值。The session initiation protocol （ SIP） is widely used in the embedded equipment .Due to the characteristics of SIP protocol and complicated environment , there are many security problems in it and SIP faces a lot of attacks .At present there are a variety of security mechanisms be proposed .But the computation cost of these security mechanisms is so high that they are not suitable for use in embedded devices .In this paper , we propose a dynamic key-based authentication mechanism on the basis of the traditional Http digest authentication to improve the security of SIP and its computation cost is relatively lower .Conclusion shows the authentication mechanism can be used in the embedded equipment and there are some practical value .

关 键 词：会话初始化协议 认证 动态密钥 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]