SIP中基于身份认证的安全机制研究.PDF

19 2 Vol. 19 No. 2 2009 2 COM PUT ER TECHNOLOGY AND DEVELOPMENT Feb. 2009 SIP 吕武玲, 黎忠文 ( 厦门大学信息科学与技术学院计算机科学系, 福建厦门 36100 ) : , SIP 3GPP , SIP SIP , SIP , SIP , , , SIP , : SIP ; ; : T P393. 08 : A : 1673- 629X( 2009) 02- 01 8- 04 Research on Identity- Based Authentication in SIP L Wuling, LI Zhongw en ( Dept. of Computer Sci. , Sch. of Info . Sci. and Tech. , Xiamen Univ. , Xiamen 36100 , China) Abstract:SIP w ill be w idely applied in 3GPP, because of its simplicity, flexibility and scalability. But a lack of powerful security mecha nism, lead it to face many security threats. In this paper, analyse the issues existed and the requirements needed in SIP security mecha nism. In order to solve the problems in SIP authentication and information encryption, proposed a new m ethod about authentication by in volving identity- based encryption, a security mechanism w hich has simple architecture and is easy to apply, to the SIP security mecha nism. It makes the construction of the system easier. There is no need of complex steps about key agreement, and it is easy to maintain. At the same tim e it meets the safety requirements of SIP to ensure that the integrity, reliability and incontestability in the process of ses sion establishment and m essaging conversation. Key words:SIP; security; identity- based authentication 0 , SIP ( Session Initiation Protocol, SIP) IET F SIP : HTTP [ 1] [ 2] [ 3] , , PKI , , HTTP RFC3261, , SIP