摘要
SIP协议通常用来进行VoIP的呼叫建立,但IETF制定的SIP标准中给出的认证机制存在很多的安全风险。论文提出了一种基于身份加密系统(椭圆曲线上的双线性配对密码系统)的SIP认证机制,该机制能为VoIP的用户间提供安全、保密的通信。
SIP (Session Initiation Protocol) protocol is commonly used for establishment of VolP calls. IETF SIP stanards do not specify a secure authentication process, thus allowing malicious parties to impersonate other parties or to charge calls to other parties. This paper proposes an extension to the SIP protocol that uses an identity-based authentication mechanism. This extension provides stronger cryptographic assurances for VolP authentication.
出处
《信息安全与通信保密》
2007年第5期133-135,共3页
Information Security and Communications Privacy