CAJ | 학술논문

会话初始化协议（ SIP）广泛应用在嵌入式移动终端设备中，但由于SIP协议本身特点使得其在复杂、开放的网络应用环境中容易被攻击者模仿、篡改。虽然已经提出了很多增强SIP协议安全性的认证机制，但由于认证过程计算性能消耗大，不适合在嵌入式设备中使用。在传统Http认证的基础上，提出了一种基于动态密钥的认证机制，以较低的计算代价改进了SIP协议的安全性，对SIP协议在嵌入式设备中普及有一定的实用价值。
회화초시화협의（ SIP）엄범응용재감입식이동종단설비중，단유우SIP협의본신특점사득기재복잡、개방적망락응용배경중용역피공격자모방、찬개。수연이경제출료흔다증강SIP협의안전성적인증궤제，단유우인증과정계산성능소모대，불괄합재감입식설비중사용。재전통Http인증적기출상，제출료일충기우동태밀약적인증궤제，이교저적계산대개개진료SIP협의적안전성，대SIP협의재감입식설비중보급유일정적실용개치。
The session initiation protocol ( SIP) is widely used in the embedded equipment .Due to the characteristics of SIP protocol and complicated environment , there are many security problems in it and SIP faces a lot of attacks .At present there are a variety of security mechanisms be proposed .But the computation cost of these security mechanisms is so high that they are not suitable for use in embedded devices .In this paper , we propose a dynamic key-based authentication mechanism on the basis of the traditional Http digest authentication to improve the security of SIP and its computation cost is relatively lower .Conclusion shows the authentication mechanism can be used in the embedded equipment and there are some practical value .