Secret key distribution method based on session initiation protocol (SIP) communication system

Abstract

The present invention discloses a secret key distribution method based on an SIP communication system. The secret key distribution method is realized based on a communication system composed of a VOIP server, a secret key distribution server and a plurality of terminals, and is characterized in that the terminals send the calling request messages to the VOIP server, the VOIP server sends a secret key obtaining request message to the secret key distribution server, and the secret key distribution server utilizes the public keys of the terminals to generate the secret key data of the terminals and distributes the secret key data to the terminals via the VOIP server; after receiving the corresponding secret key data, the terminals utilizes the own private keys to decrypt the secret key data to obtain the session keys, and the calling and called terminals utilize the session keys to realize the secret communication. According to the present invention, a secret key distribution process is simplified, the secret key data is transmitted to the terminals by the SIP messages in communication connection without needing to increase the message number additionally, the real-time performance is stronger, and the secret communication of the terminals can be realized.

Description

technical field [0001] The invention relates to a key distribution method based on a SIP communication system, belonging to the technical field of information security. Background technique [0002] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, which is used to create, modify and release the session of one or more participants. The calling terminal and the called terminal establish a communication connection through the VOIP server, and the calling terminal and the called terminal interact. The voice content is based on the RTP real-time transmission protocol. The voice data packets are encapsulated into IP packets and transmitted on the IP network. During the transmission process, if the data packets are not processed, the call content data in plain text will be eavesdropped, resulting in information leakage. hidden dangers. [0003] In order to ensure the security and integrity of the communication content of both parties, the PKI...

AI Technical Summary

Problems solved by technology

[0002] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, which is used to create, modify and release the session of one or more participants. The calling terminal and the called terminal establish a communication connection through the VOIP server, and the calling terminal and the called terminal interact. The voice content is based on the RTP real-time transmission protocol. The voice data packets are encapsulated into IP packets and transmitted on the IP network. During the transmission process, if the data packets are not processed, the call content data in plain text will be eavesdropped, resulting in information leakage. Hidden dangers

[0003] In order to ensure the security and integrity of the communication content of both parties, the PKI system is widely used, and digital certificates, asymmetric encryption, digital signatures and other technologies are used to distribute keys to ensure the confidentiality, integrity and non-repudiation of keys. The obtained key encrypts the data packet and then transmits it. However, the SIP communication system based on the PKI system architecture has the problems of complex implementation, high cost, and poor real-time performance.

Images