Method for realizing safety transfering of medium flow

Abstract

The invention discloses a method for realizing secure transmission of media streams, which is applied in the next-generation network NGN including softswitches and terminals. The terminals include a sending end and a receiving end for transmitting media streams. The method includes: (1) sending The terminal and the receiving end carry out security negotiation through the soft switch, and obtain the communication key generated by the soft switch and the security parameters that are supported by the two terminals specified by the soft switch; The flow message is encrypted or / and message integrity protected, and then sent to the receiving end; (3) the receiving end decrypts the received media flow message or / and message identification according to the communication key and security parameters , so as to realize the secure transmission of the media stream from the sender to the receiver. And by setting the source identifier of the terminal application layer to complete the authentication of the source message, it solves the problem that the source of the message cannot be authenticated after the media stream traverses the NAT.

Description

technical field [0001] The invention relates to a method for transmitting media streams in the communication field, in particular to a method for realizing safe transmission of media streams in NGN. Background technique [0002] NGN (Next Generation Network) is the abbreviation of Next Generation Network. It is a new type of public telecommunication network based on IP technology, that is, under a unified management platform, digital signals such as audio and video are transmitted between the Internet, mobile communication network, and fixed-line communication network, truly realizing the integration of broadband and narrowband An integrated service network that integrates modernization, wired and wireless integration, active and passive integration, and transmission and access integration. In other words, NGN is the development direction of the current communication field. [0003] Digital signals such as audio and video transmitted between the Internet, mobile communicat...

AI Technical Summary

Problems solved by technology

[0008] First, since other intermediate nodes except the sender 3 and receiver 5 can decrypt the media stream message, the system cannot guarantee the security of each intermediate node, thus reducing the safety factor of media stream transmission

[0009] Second, the system needs to allocate corresponding media stream encryption keys for both ends of each segment, which makes the key distribution of the entire system complicated. The nodes between the node and the segment also need to decrypt the media stream first, and then re-encrypt it before transmission, which not only brings a huge performance burden to the system, but also reduces the speed of media stream transmission, directly affecting real-time services such as voice quality of service

[0010] Third, in the actual NGN network networking, complex network operations such as multiple address translations are involved, and the current source authentication used to authenticate the identity of the sender uses the source address information in the IP header of the sender as the authentication content. In this way, there is a problem that the source of the message cannot be authenticated due to the IP address change when the media stream traverses the NAT (Netword Address Translation, Network Address Translation) device.

Images