SIP应用中的安全通信方案设计

针对SIP应用安全机制中的注册认证机制和握手认证机制进行研究。一般SIP应用的安全方案大多是从传统的非实时业务,WEB和电子邮件应用中继承而来,没有对多媒体应用的网络架构和应用特点进行优化,因而难以兼顾安全性、易用性和运行效率。针对传统SIP安全机制的弱点,将SIP应用的体系结构和安全机制相结合,提出改进的身份认证方案,通过将系统登录和呼叫握手时的用户凭证相关联,简化了呼叫认证流程,在保证SIP整体通信安全性的同时,支持良好单点登陆特性,具备高效、易用的特点。

Design of Security Communication Solution in SIP Based Application

Research on authentication mechanism of register and session-establish in SIP based applications.Classic security solution of SIP based applications are usually based on WEB and Email applications,dont optimized for re- al time application,therefore can not achieve good performance on either security,efficiency or convenience.By the way of integrated SIP based application architecture and security mechanism,associated the credentials in user register and session-establish process,bring forward a new security communication solution,simplified the au- thentication process in calling,and have the advantage of SSO support,high efficiency and easy to use besides of security.