SIP (System In Package)-based security certificate registering method

Abstract

The invention provides an SIP (System In Package)-based security certificate registering method. The method comprises the steps of transmitting a register data package into an SIP server by an SIP client; starting a register authentication module after the SIP server receives the register data package, transmitting an anauthorized data package, taking an authenticated activating grouped data, and requiring the SIP client to provide authentication information, wherein the authenticated activating grouped data comprises a public key certificate including an SIP server and a secrete key negotiating parameter; transmitting the register data package with register information including access authentication request grouped data by the SIP client according to user information, wherein the access authentication request grouped data comprises the public key certificate of the SIP client and the secrete key negotiating parameter of the SIP client; packaging the SIP server and the public key certificate of the SIP client into a certificate authentication request grouped data package by the SIP server and transmitting the SIP server and the public key certificate of the SIP client to a credible authentication server to verify; verifying whether a result is legal by the SIP server; and verifying the authentication result by the SIP client, and successfully approving by the SIP client if the authentication result is passed.

Description

Technical field [0001] The invention relates to an authentication registration method, in particular to a SIP-based safe authentication registration method that can be applied to multimedia services such as voice, video, data, etc., especially the video surveillance field. Background technique [0002] At present, the telecommunications business is developing rapidly. The new technological revolution represented by the Internet is profoundly changing the concept and system of traditional telecommunications. The telecommunications industry is facing a great change that has not been seen in a century. Multimedia communication services that integrate data, video, and audio services have developed rapidly and will become one of the mainstream services of the next-generation network NGN. As the main supporting technology in the integration, VoIP technology is becoming a hot spot of research and application. The SIP protocol proposed by IETF in 1999 is a widely used VoIP protocol. It ...

AI Technical Summary

Problems solved by technology

[0004] However, in the face of the complex and open Internet application environment, the SIP protocol itself lacks a strong security mechanism, which makes it relatively weak in terms of security, and brings great security risks to the large-scale application of SIP.

The current SIP does not have a targeted security mechanism, but only uses the HTTP digest authentication mechanism. For this mechanism, only the SIP server authenticates the client, but there is no client authentication to the SIP server, and the digest authentication is also vulnerable to man-in-the-middle attacks.

Images