一种面向SIP通信的域间认证与密钥协商机制

现有SIP安全机制在通信实体间的相互认证与密钥协商方面存在不足,针对此问题,设计了一种新的基于身份密码系统的域间密钥协商协议,然后基于该协议提出了一种面向SIP通信的认证与密钥协商机制.该机制解决了HTTP摘要认证下的单向认证以及预共享密钥问题,消除了S/MIME基于证书认证和不提供密钥协商的不足,且不同域的通信实体具有不同的系统参数.安全性分析及其实现表明,该机制在实现跨域SIP通信实体间的双向认证以及为后续媒体流机密传输提供密钥协商功能的同时可以满足SIP通信的性能要求.

A Transdomain Authentication and Key Agreement Mechanism for SIP Communications

Nowadays the problem how to authenticate mutually and then agree on a session key has not efficiently been solved in SIP communications.An identity-based cryptosystem key agreement protocol between different domains is therefore designed and based on it,an authentication and key agreement mechanism are proposed for SIP communications.The mechanism proposed rises above the difficulties of unilateral authentication and pre-sharing key under conditions of HTTP digest authentication,thus eliminating the deficie...