A key distribution method suitable for VoIP voice encryption

Abstract

The invention discloses a key distribution method suitable for VOIP voice encryption. The calling terminal initiates a session key application to a key distribution server (KDS for short), triggers key distribution, and the KDS generates a session between the main and called parties. The key is returned to the calling terminal; after the calling terminal obtains the session key, it initiates an encrypted call to the called terminal through the VOIP server, sends the key characteristic data generated by KDS to the called terminal, and the calling and called parties through the VOIP server Establish a media stream transmission channel; both parties use the session key to encrypt the media stream and transmit it to the other party, and the other party uses the session key to decrypt the received data to obtain the media stream. Advantages of the present invention: the key is directly generated by KDS, which is easy to manage the key and reduces the adjustment and transformation of the VoIP server; Encryption, full encryption, no plaintext in the transmission process, high security.

Description

technical field [0001] The invention relates to a key distribution mechanism, in particular to a method for realizing end-to-end media stream encryption key distribution between a calling terminal and a called terminal in a packet switching network, and belongs to the field of encryption communication. Background technique [0002] With the development of network communication and computer technology, voice and video applications based on packet networks have been widely used. The VOIP signaling standards mainly used in packet network communication include the H.323 system proposed by ITU-T and the SIP system proposed by IETF. The application based on the SIP standard has many advantages over the application based on the H.323 system, and a large number of applications have been gradually obtained. application. [0003] SIP (Session Initiation Protocol) is a signaling control protocol at the session layer, which is used to create, modify and release the session of one or mo...

AI Technical Summary

Problems solved by technology

[0004] Due to the call connection based on the SIP protocol, the data packets exchanged by both parties are in plain text. Therefore, the call content is very easy to be eavesdropped on the network, and there is a large information security risk.

At present, the security design for VoIP mainly solves the problem of secure distribution of voice encryption keys through the transmission protection of the SIP protocol, such as the IPSec transmission protection protocol at the IP layer and the SSL transmission protection protocol at the TCP layer; in addition, it is also implemented by extending the SIP protocol. End-to-end session key negotiation method, but the negotiation method will lead to the difficulty of identity authentication and effective supervision of both parties

Images