Flexible and controllable session encryption method

Abstract

The invention discloses a flexible and controllable session encryption method. An SIP server in the calling direction sends a connection establishment request message carrying an identification indicating whether session contents during connection are needed to be encrypted or not, the SIP server obtains a randomly-generated secret key through a password server if encryption is needed, the secret key is sent to two communicated parties by utilizing messages interacted by the two communicated parties, and follow-up voice data of the two parties are encrypted by adopting a encrypted and the secret key; if the encryption is not needed, the SIP server directly sends a connection establishment request message to a called party. The IP voice encryption processing process can be simplified. Compared with secret keys configured and fixed in advance, configuration work is omitted, communicated-connected secret keys each time are different, and even if the secret keys are cracked, session contents after connection is re-established cannot be obtained.

Description

technical field [0001] The invention relates to a flexible and controllable call encryption method, which belongs to the technical field of information security. Background technique [0002] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, used to create, modify and release sessions of one or more participants, such as figure 1 As shown, when two terminals want to initiate a call, the calling party sends a SIP request message for establishing a connection to the SIP server. After receiving the request message, the SIP server sends a SIP request message for establishing a connection to the called party, and the called party accepts the request. , The calling party and the called party establish a call connection, and the voice content exchanged between the calling party and the called party is based on the RTP real-time transmission protocol. The voice data packet is encapsulated into an IP packet and transmitted on the IP network. [...

AI Technical Summary

Problems solved by technology

[0003] Due to the call connection based on the SIP protocol, the data packets exchanged by both parties are in plain text, so the call content is very easy to be eavesdropped on the network, and there is a large potential information security risk; the existing call content encryption methods still have the following problems : The standard SRTP protocol is adopted, and the implementation process is relatively complicated; the same key is preset on the calling terminal and the called terminal, and both parties use the same encryption algorithm to implement, so the flexibility is poor. Once the key is leaked, all subsequent connections The content of the call may be leaked, and the remedial measures need to modify the configuration of each terminal one by one. In addition, the same system cannot support encryption and non-encryption at the same time, that is, it is impossible to flexibly choose whether the call content needs to be encrypted according to actual needs.

Images