基于SIP协议的安全网关设计  

Design of Security Gateway Based on SIP

作　　者：蒋华[1,2] 杨磊[1] 胡荣磊[2] 

机构地区：[1]西安电子科技大学,陕西西安710100 [2]北京电子科技学院,北京100070

出　　处：《计算机技术与发展》2015年第7期120-123,共4页Computer Technology and Development

基　　金：中办信息安全与保密重点实验室;北京市教委共建专项基金资助项目(YZDJ0804)

摘　　要：SIP(会话传输协议)是基于文本的传输协议,信令发起简单,使用方便,是下一代通信网的核心协议之一,近年来得到了很大的应用。然而由于SIP协议的设计之初没有考虑到安全性问题,导致SIP协议在应用中很容易受到安全威胁。所以文中针对SIP协议面临的安全威胁进行研究,结合基于椭圆曲线的自证明公钥密码算法,提出一种解决方案;结合此方案设计一种安全网关,该网关拥有SIP代理服务器的功能,任何SIP终端用户都可以方便地接入进来,从而有效提高了SIP网络的机密性、完整性、不可否认性。SIP is a transfer protocol based on the text, signaling simply, easy to use,is one of the core of the next generation network pro- tocol, which has great application. However, as the SIP doesn＇ t take into the security issues account at the beginning of design, SIP proto- col is vulnerable to security threats in the application. Therefore, aiming at the security threats faced by SIP, combined with self-certified public key cryptographic algorithm based on the elliptic curve ,put forward a kind of solution to solve the problem. Then design a security gateway combined with the solution. The gateway has a function of SIP proxy-server, and any SIP-user can access to it conveniently, thus effectively improving the confidentiality, integrity, non-repudiation for SIP network.

关 键 词：会话传输协议 SIP代理服务器 椭圆曲线 自证明公钥密码算法 安全网关 

分 类 号：TP302.1[自动化与计算机技术—计算机系统结构]