软交换中的一种安全策略

Security Strategy in Softswitch

针对软交换中的SIP协议没有定义自身的安全机制,提出了一个可行的解决方案·简单叙述了软交换中的SIP协议的功能,特点和工作机制,并指出SIP协议中存在的安全性问题,详细分析原本为电子邮件明文的加密和签名设计的加密方法PGP(PrettyGoodPrivacy)的安全策略,加密过程,安全强度及其性能等·提出了将应用广泛、安全性高的安全策略PGP引入SIP协议中,以满足SIP消息传输中的安全要求·具体阐述了PGP在SIP协议中应用的实现方法,列举了经PGP加密的SIP邀请消息格式和用PGP数字签名的SIP消息格式·

A feasible solution is proposed to the security problem of SIP protocol in softswitch since no security strategy has been defined by SIP itself. Describes briefly the function characters and working mechanism of SIP protocol in softswitch, especially its existing security problem. Then the security strategy, encryption process, security and performance of PGP (Pretty Good Privacy) which was originally designed for encryption and signature of e-mail are analyzed in detail. The widely-used highly secure PGP security strategy is thus introduced into SIP protocol to meet the security requirements of SIP message transmission. Expatiates the implementation of PGP in SIP protocol and exemplifies the formats of SIP INVITE message with PGP encryption and with digital PGP signature.