面向多媒体系统的HTTP摘要安全认证

An Security Authentication of HTTP Digest for Multimedia System

多媒体系统的安全形势非常严峻,客户端是信息安全事故的集中源头,因此,多媒体系统中客户端的安全认证非常关键。为了弥补传统多媒体系统中SIP的不足,设计了一种基于HTTP摘要的认证方案。首先简析了SIP协议与HTTP协议;设计了多媒体系统整体结构,定义了各主要组成部件的功能。然后设计了认证流程,AG的质询消息头,MC的应答消息头和Response参数等方案。本文的设计思路对提高多媒体系统和SIP协议的安全性具有一定借鉴意义。

It is very severe for the security situation of multimedia system, and the client is the centralized source of information security incident, so it is the key of security authentication for clien in multimedia system. In order to make up for the lack of security of SIP in traditional multimedia system, it designs an authentication scheme based on HTTP digest. Firstly, it analyzes the principle of SIP protocol and HTTP protocol, and it designs the whole structure of multi-media system, and defines the function of each main component. Then, it designs the certification process and the scheme including chcallenge message header of AG, response message header of MC and parameter of Response. The design idea, in the paper, has a certain reference significance for improving the security of multimedia system and SIP protocol.