计算机工程与应用
計算機工程與應用
계산궤공정여응용
COMPUTER ENGINEERING AND APPLICATIONS
2010年
5期
96-99
,共4页
周计成%徐开勇%赵彬%吴平
週計成%徐開勇%趙彬%吳平
주계성%서개용%조빈%오평
会话发起协议%安全机制%基于身份的密码学%身份认证%密钥协商
會話髮起協議%安全機製%基于身份的密碼學%身份認證%密鑰協商
회화발기협의%안전궤제%기우신빈적밀마학%신빈인증%밀약협상
Session Initiation Protocol(SIP)%security mechanism%Identity Based Cryptography(IBC)%authentication%key agreement
随着SIP协议在网络通信中的广泛应用,特别是向移动领域扩展,网络中大量使用无线设备,终端的运算与存储能力有限.对SIP的安全方案进行了讨论和分析,提出了一种基于身份的认证与密钥协商方案,保证了SIP消息传输过程中的完整性和真实性,并在该过程中进行了密钥协商.方案中不需要公钥证书,用户用身份标识SIP URI作为公钥,降低了对终端计算、存储能力的需求和通信开销,具有简单高效的优点.
隨著SIP協議在網絡通信中的廣汎應用,特彆是嚮移動領域擴展,網絡中大量使用無線設備,終耑的運算與存儲能力有限.對SIP的安全方案進行瞭討論和分析,提齣瞭一種基于身份的認證與密鑰協商方案,保證瞭SIP消息傳輸過程中的完整性和真實性,併在該過程中進行瞭密鑰協商.方案中不需要公鑰證書,用戶用身份標識SIP URI作為公鑰,降低瞭對終耑計算、存儲能力的需求和通信開銷,具有簡單高效的優點.
수착SIP협의재망락통신중적엄범응용,특별시향이동영역확전,망락중대량사용무선설비,종단적운산여존저능력유한.대SIP적안전방안진행료토론화분석,제출료일충기우신빈적인증여밀약협상방안,보증료SIP소식전수과정중적완정성화진실성,병재해과정중진행료밀약협상.방안중불수요공약증서,용호용신빈표식SIP URI작위공약,강저료대종단계산、존저능력적수구화통신개소,구유간단고효적우점.
Along with Session Initiation Protocol(SIP)application in network communication widely,especially in mobility area,many wireless equipments are used.These devices have limited capacity of storage and computing.In this paper,the security schemes of SIP are discussed and analyzed.Furthermore,a new authentication and key agreement scheme based on identity is proposed,which assures the integrity and authenticity of SIP message during transmission and consults with share key.The scheme doesn't need any public key certificate;user's SIP URI is used as his public key.It needs less storage,computing capacity and communication cost,so it is simple and effective.