SIP protocol based session encryption method

Abstract

The invention discloses an SIP protocol based session encryption method. The SIP protocol based session encryption method comprises the steps that a calling party sends an SIP request message for connection establishment to a called party through an SIP server; the SIP server sends randomly-generated secret keys to the calling party and the called party, and then secret key receiving confirmation messages are sent to the SIP server after the calling party and the called party receive the secret keys sent by the SIP server; the calling party and the called party establish session connection; the calling party and the called party use the same encryption algorithm and the secret keys sent by the SIP server to perform encryption and decryption to voice data. By means of the SIP protocol based session encryption method, IP voice encryption processing process can be greatly simplified. Compared with an SRTP protocol, achievement complexity is greatly reduced. Compared with pre-configured fixed secret keys, configuration work is omitted, the secret keys for communicating connection are different each time, and even if the secret keys are cracked, session contents after connection is re-established cannot be obtained.

Description

technical field [0001] The invention relates to a call encryption method based on the SIP protocol, belonging to the technical field of information security. Background technique [0002] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, used to create, modify and release sessions of one or more participants, such as figure 1 As shown, when two terminals want to initiate a call, the calling party sends a SIP request message for establishing a connection to the SIP server. After receiving the request message, the SIP server sends a SIP request message for establishing a connection to the called party, and the called party accepts the request. , The calling party and the called party establish a call connection, and the voice content exchanged between the calling party and the called party is based on the RTP real-time transmission protocol. The voice data packet is encapsulated into an IP packet and transmitted on the IP network. [0003...

AI Technical Summary

Problems solved by technology

[0003] Due to the call connection based on the SIP protocol, the data packets exchanged by both parties are in plain text, so the call content is very easy to be eavesdropped on the network, and there is a large potential information security risk; the existing call content encryption methods still have the following problems : The standard SRTP protocol is adopted, and the implementation process is relatively complicated; the same key is preset on the calling terminal and the called terminal, and both parties use the same encryption algorithm to implement, so the flexibility is poor. Once the key is leaked, all subsequent connections The content of the call may be leaked, and the remedial measures need to modify the configuration of each terminal one by one

Images