CAJ | 학술논문

针对现有IMS网络中文件传输时仅能保护SIP信令层,缺乏面向媒体层的有效安全机制的问题,提出一种基于S/MIME的文件安全传输方案.通过分析IPsec、TLS等安全机制的适用范围和在文件传输时的安全缺陷,依托MSRP协议实现IMS中文件传输,基于S/MIME实现端到端传输安全.仿真测试结果表明:该方案能有效保护传输过程中的文件实体,避免了通过IMS中各呼叫会话控制实体带来的延时,实现了IMS网络中的文件安全传输.
침대현유IMS망락중문건전수시부능보호SIP신령층,결핍면향매체층적유효안전궤제적문제,제출일충기우S/MIME적문건안전전수방안.통과분석IPsec、TLS등안전궤제적괄용범위화재문건전수시적안전결함,의탁MSRP협의실현IMS중문건전수,기우S/MIME실현단도단전수안전.방진측시결과표명:해방안능유효보호전수과정중적문건실체,피면료통과IMS중각호규회화공제실체대래적연시,실현료IMS망락중적문건안전전수.
The existing IP multimedia subsystem (IMS) network security mechanism mainly focus on the SIP signaling plane protection and lack effective security mechanism for media plane. According to the characteristics of file transferring in IMS and potential security threats, this paper proposes a file safety transmission method based on secure/multipurpose Internet mail extensions (S/MIME). The scheme uses message session relay protocol (MSRP) to realize the IMS file transfer and achieves end-to-end security by S/MIME. It can effectively protect the transmission file entity and decrease the delay by avoiding traverse each call session control function in the IMS. Simulation results prove that the scheme can realize file safety transmission in the IMS network.