Key distribution method applicable to VOIP voice encryption

Abstract

The invention discloses a key distribution method applicable to VOIP voice encryption, which is characterized in that a calling terminal initiates a session key application to a key distribution server (KDS) so as to trigger key distribution, the KDS generates a session key for a calling party and a called party and returns the session key to the calling terminal; the calling terminal initiates an encryption call to a called terminal through a VOIP server after acquiring the session key and sends key feature data generated by the KDS to the called terminal, and a media stream transmission channel is established between the calling party and the called party through the VOIP server; the calling party and the called party encrypt media streams by using the session key and send the encrypted media streams to each other, and the receiving parties decrypt the received data by using the session key so as to acquire the media streams. The key distribution method has the advantages that the key is directly generated by the KDS, thereby being easy to perform key management, and reducing adjustment and transformation for the VoIP server; the KDS performs identity verification on the calling party and the called party before the key is generated, thereby making up the vulnerability of identity authentication of an SIP (Session Initiation Protocol); one session is provided with one key, encryption is performed in the whole process, no plaintext appears in the transmission process, and the security is high.

Description

technical field [0001] The invention relates to a key distribution mechanism, in particular to a method for realizing end-to-end media stream encryption key distribution between a calling terminal and a called terminal in a packet switching network, and belongs to the field of encryption communication. Background technique [0002] With the development of network communication and computer technology, voice and video applications based on packet networks have been widely used. The VOIP signaling standards mainly used in packet network communication include the H.323 system proposed by ITU-T and the SIP system proposed by IETF. The application based on the SIP standard has many advantages over the application based on the H.323 system, and a large number of applications have been gradually obtained. application. [0003] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, which is used to create, modify and release the session of one or mo...

AI Technical Summary

Problems solved by technology

[0004] Due to the call connection based on the SIP protocol, the data packets exchanged by both parties are in plain text. Therefore, the call content is very easy to be eavesdropped on the network, and there is a large information security risk.

At present, the security design for VoIP mainly solves the problem of secure distribution of voice encryption keys through the transmission protection of the SIP protocol, such as the IPSec transmission protection protocol at the IP layer and the SSL transmission protection protocol at the TCP layer; in addition, it is also implemented by extending the SIP protocol. End-to-end session key negotiation method, but the negotiation method will lead to the difficulty of identity authentication and effective supervision of both parties

Images