【摘要】 因为简单、灵活和易扩展等特点,SIP将在3GPP中得到广泛应用,但是SIP本身缺少有力的安全机制使其面临很多安全威胁。文中对SIP中的安全问题和安全性要求进行分析,为了解决SIP中认证和消息加密的问题,把基于身份认证这种结构简单、应用容易的安全机制引入到SIP协议中,提出了一种新的认证加密方法。采用基于身份的加密机制使系统初始化简单,不需要繁琐的密钥协商步骤,并且维护容易。同时满足了SIP的安全要求,保证了会话建立和消息通信过程中的完整性、可靠性和不可抵赖性。更多还原

【Abstract】 SIP will be widely applied in 3GPP,because of its simplicity,flexibility and scalability.But a lack of powerful security mechanism,lead it to face many security threats.In this paper,analyse the issues existed and the requirements needed in SIP security mechanism.In order to solve the problems in SIP authentication and information encryption,proposed a new method about authentication by involving identity-based encryption,a security mechanism which has simple architecture and is easy to apply,to the SIP security mechanism.It makes the construction of the system easier.There is no need of complex steps about key agreement,and it is easy to maintain.At the same time it meets the safety requirements of SIP to ensure that the integrity,reliability and incontestability in the process of session establishment and messaging conversation.更多还原