NGN中SIP协议安全研究

Reserch on SIP protocol of NGN security

通过对终端系统与中间服务器、终端系统与终端系统、中间服务器与中间服务器的协议改进,在中间服务器之间采用底层的IPSec或者TLS作为安全机制,SIP消息加载一个MIME消息体,并且MIME标准包括了MIME内容的保密机制,解决了用户终端认为中间服务器或SIP网络不可信任的问题;将双向HTTP摘要认证与密钥协商的安全机制作比较,解决了客户机与服务器间的安全隐患;SIP协议取代H.323协议并应用于NGN网络中,避免或缓解了现有的安全威胁.

The problem of distrust between the middle server with the SIP network was sloved through improving of the terminal system and the middle server, the terminal system and the terminal system the middle server and the middle server＇ s agreement, at the sametime ,applying IPSee or TLS as saftey mechanism between the middle server, the SIP news loading a MIME news body and MIME standard including the MIME content security mechanism. Camparing the bidirectional HTTP abstract authentication the key consultation＇ s security mechanism, the hidden danger between the client and server was solved. The SIP agrement can substitute for H. 323 agreement, it was applied in the NGN network could avoid or alleviate security threat.