SIP信令安全机制的改进与实现

SIP信令安全机制的研究是整个SIP应用安全性研究的一个重要方面。这里根据目前的研究现状,提出了一种改进机制来保证SIP信令的安全性。该机制分为两个阶段,首先建立UAC与注册服务器间的TLS通道,结合HTTP摘要认证实现客户端与服务器的双向认证,然后在SIP代理服务器之间实现IPSec加密,并利用之前建立的TLS通道,实现了会话建立阶段的全程加密。通过仿真实验,证明了该方法的可行性。

Improvement and Implementation of SIP Signaling Security Mechanism

The study on SIP security mechanism is an important aspect in the research of SIP application security. Based on the research situation, an improved mechanism is proposed, thus to ensure SIP signaling security. There are two steps in this mechanism, that is, first to establish TLS channel between UAC and registration server and complete mutual authentication, then with the established TLS channel in step one, to implement IPSec between SIP proxy servers and achieve all-the-way encryption of SIP signaling. The simulation results indicate the feasibility of this mechanism.