IMS网络拓扑隐藏及其加密算法的研究

Research on IMS Topology Hiding Internetworking Gateway and Encryption Algorithm

IMS是3G系统中核心网的一部分,它通过由会话初始协议(SIP)提供的会话性能,建立起端到端的会话。为了保证IMS网络中信息不被泄露,加入拓扑隐藏功能,通过加密SIP消息中的一些内部IP地址和其他网络信息,帮助保护IMS网络拓扑,实现网络的安全。IPSec ESP为所有SIP信令提供机密性保护,128bit加密块和密钥的CBC模式用于网络隐藏的加密算法,随机的初始化向量(IV)被用于每一次加密,采用AES算法来实现。

IMS is a part of core network in the 3G system. It establishes the end-to-end conversation through the ability of conversation initiation provided by the SIP. In order to make sure that messages of IMS are not revealed, THIG is added in it. It protects IMS topology and realizes network security by encrypting some internal IP addresses and other network information of SIP messages. IPSec ESP provides protection for all confidentiality of SIP signaling. The hidden encryption algorithm of 128-bit encryption key block and the CBC network model are used. The random initialization vector （IV） is used for each encryption, which is realized by AES algorithm.