|
|||||
|
|
| 基于SIP协议的网络电话安全方案及实现 | |
| 引用本文： | 刘刚,覃嘉,廖伟,刘强,吕玉琴.基于SIP协议的网络电话安全方案及实现[J].计算机工程,2008,34(11):140-142. |
| 作者姓名： | 刘刚 覃嘉 廖伟 刘强 吕玉琴 |
| 作者单位： | 1. 北京邮电大学电子工程学院,北京,100876 2. 北京邮电大学理学院,北京,100876 3. 重庆工学院数理学院,重庆,400050 |
| 摘 要： | 以基于身份的非对称加密技术为核心，引入身份证书和更具灵活性的XML格式属性证书，解决用户身份认证、私钥分发和安全实现增值服务问题。与话者在通话时，利用证书向PKDC进行身份认证，获取私钥，用于加密传输会话密钥。在信令协商过程中，CPL服务器通过验证用户的属性证书提取用户属性，更加便捷地实现增值服务。 |
| 关 键 词： | XML语言 属性证书 私钥分发中心 |
| 文章编号： | 1000-3428(2008)11-0140-03 |
| 修稿时间： | 2007年6月10日 |
Security Mechanism and Realization for SIP-based Network Telephone |
|
| LIU Gang,QIN Jia,LIAO Wei,LIU Qiang,LV Yu-qin.Security Mechanism and Realization for SIP-based Network Telephone[J].Computer Engineering,2008,34(11):140-142. | |
| Authors: | LIU Gang QIN Jia LIAO Wei LIU Qiang LV Yu-qin |
| Affiliation: | (1. School of Electronic Engineering, Beijing University of Posts and Telecommunications, Beijing 100876; 2. School of Sciences, Beijing University of Posts and Telecommunications, Beijing 100876; 3. School of Sciences, Chongqing Institute of Technology, Chongqing 400050) |
| Abstract: | To solve the problems of authentication of user identity, private-key distribution and secure realization of increment service, a new scheme is proposed by taking the public-key algorithm based on identity as the core. The identity certificate and the flexible XML attribute certificate are used in the new scheme. Participants use their identity certificates to authenticate themselves to PKDC, and obtain the private-key, which are used to encrypt and transmit the session key. And in the process of signaling negotiation, the increment service is realized expediently by CPL server authenticating the user attribute certificate and picking up the user attribute. |
| Keywords: | XML attribute certificate private-key distribution center |
| 本文献已被 CNKI 维普 万方数据 等数据库收录！ | |
| 点击此处可从《计算机工程》浏览原始摘要信息 | |
| 点击此处可从《计算机工程》下载全文 | |