基于oSIP的嵌入式SIP终端设计

在开源SIP协议栈oSIP基础上设计实现了基于PXA255微处理器平台、使用Linux操作系统的嵌入式SIP终端。在给出系统的框架结构之后,详细描述了系统设计所采用的几种重要机制,并对协议层模块的实现进行了重点介绍,最后介绍了SIP终端的测试平台。     

Design and realization of ad-hoc VoIP with embedded p-SIP server

In this paper we design and implement the pseudo session initiation protocol (p-SIP) server embedded in each mobile node to provide the ad-hoc voice over Internet protocol (VoIP) services. The implemented p-SIP server, being compatible with common VoIP user agents, integrates the standard SIP protocol with SIP presence to handle SIP signaling and discovery mechanism in the ad-hoc VoIP networks. The ad-hoc VoIP signaling and voice traffic performances are analyzed using E-model R rating value for up to six hops in the implemented test-bed. We also conduct the interference experiments to imitate the practical ad-hoc VoIP environment. The analyzed results demonstrate the realization of ad-hoc VoIP services by using p-SIP server.     

基于SIP音视频通信软件的设计

本文利用SIP协议在Win2K系统平台上设计实现了一个音视频通信方案。该方案利用开源协议栈oSIP／eXosip实现信令的交换,利用jrtp协议栈实现音视频数据的封装和发送,最后使用了多线程技术设计。     

支持新型控制协议SIP的电力系统视频监控设计

针对电力系统视频监控工程的实际技术问题,采用嵌入式设备和基于网络分层的SIP管理架构,提出了一种支持新型控制协议SIP的电力系统视频监控设计,包括SIP的控制机制、基于SIP的监控系统结构、视频监控系统总体组成、硬件设计、软件设计和实验结论等;该系统的各成员之间可以通过组播或单播的方式进行交互,并在域内处理大量的信令信息和媒体流信息,具有扩展性、智能性、灵活性、自主性和互操作性等多种优良特性;经测试指标符合技术规范,实现了电力系统视频监控管理及控制的基本和扩展功能。     

IP—PBX呼叫传送功能的实现

在开发基于SIP的IP-PBX电话传送功能过程中。发现了不同类型SIP电话终端之间关于呼叫传送功能互不兼容的问题,在分析了IP—PBX呼叫传送功能及各种类型的SIP电话终端的特性后,提出了SIP及其扩展的协议相结合的方法,实现了不同类型SIP电话终端之间的呼叫传送功能。     

Utilizing bloom filters for detecting flooding attacks against SIP based services

Any application or service utilizing the Internet is exposed to both general Internet attacks and other specific ones. Most of the times the latter are exploiting a vulnerability or misconfiguration in the provided service and/or in the utilized protocol itself. Consequently, the employment of critical services, like Voice over IP (VoIP) services, over the Internet is vulnerable to such attacks and, on top of that, they offer a field for new attacks or variations of existing ones. Among the various threats–attacks that a service provider should consider are the flooding attacks, at the signaling level, which are very similar to those against TCP servers but have emerged at the application level of the Internet architecture. This paper examines flooding attacks against VoIP architectures that employ the Session Initiation Protocol (SIP) as their signaling protocol. The focus is on the design and implementation of the appropriate detection method. Specifically, a bloom filter based monitor is presented and a new metric, named session distance, is introduced in order to provide an effective protection scheme against flooding attacks. The proposed scheme is evaluated through experimental test bed architecture under different scenarios. The results of the evaluation demonstrate that the required time to detect such an attack is negligible and also that the number of false alarms is close to zero.     

基于IMS的移动多媒体广播时移系统信令设计

提出一种基于IMS的移动多媒体广播时移系统架构,该架构融合广播网络和无线移动通信网络,为移动多媒体广播提供时移服务,实现服务与接入无关。设计基于SIP的时移信令流程来完成对时移业务的支撑。利用排队论方法对时移请求信令延迟进行理论分析,结果表明信令延迟能够满足实时性需求,证明该系统是完全可行的。     

基于SIP的安全认证机制的研究及改进

会话初始协议大部分认证机制只提供服务器到客户端的单向认证,HTTP摘要认证就是其中的一种。该文通过分析其过程,找出认证协议中的安全缺陷,给出攻击者可能进行的攻击。针对协议的安全漏洞,提出一种改进的安全机制,在提供服务器和客户端之间相互认证的基础上加入加密保护和完整性保护,以保证消息传输的安全性。     

The “Always Best Packet Switching” architecture for SIP-based mobile multimedia services

This paper presents a distributed architecture for the provision of seamless and responsive mobile multimedia services. This architecture allows its user applications to use concurrently all the wireless network interface cards (NICs) a mobile terminal is equipped with. In particular, as mobile multimedia services are usually implemented using the UDP protocol, our architecture enables the transmission of each UDP datagram through the “most suitable” (e.g. most responsive, least loaded) NIC among those available at the time a datagram is transmitted. We term this operating mode of our architecture Always Best Packet Switching (ABPS). ABPS enables the use of policies for load balancing and recovery purposes. In essence, the architecture we propose consists of the following two principal components: (i) a fixed proxy server, which acts as a relay for the mobile node and enables communications from/to this node regardless of possible firewalls and NAT systems, and (ii) a proxy client running in the mobile node responsible for maintaining a multi-path tunnel, constructed out of all the node's NICs, with the above mentioned fixed proxy server. We show how the architecture supports multimedia applications based on the SIP and RTP/RTCP protocols, and avoids the typical delays introduced by the two way message/response handshake of the SIP signaling protocol. Experimental results originated from the implementation of a VoIP application on top of the architecture we propose show the effectiveness of our approach.     

无线Mesh网中可靠SIP呼叫连接的选路技术

在无线Mesh网中布设基于SIP的应用,是在缺少通信基础设施的地区实现多媒体应急通信的有效方式,但是易失效的无线链路会降低通信的可靠度。研究了如何在无线Mesh网中向SIP服务器高效地转发SIP呼叫请求消息。提出了一点对多点中任意一点的可靠度度量模型,用于描述实时、有限尝试次数的呼叫连接通信的可靠性;基于呼叫成功率、呼叫连接速度这两个优化目标提出了一种路集选择方法,并展开了对这种方法的通信可靠度上下界的分析和比较;最后通过仿真实验验证了此路集选择方法的有效性和优越性。