Dynamic switching method for VoIP audio-video encryption keys

Abstract

The invention mainly discloses a dynamic switching method for VoIP audio-video encryption keys. The dynamic switching method is applied to key negotiation between a client and a server end. The methodcomprises the following steps: (a) carrying out primary key negotiation between the client and the server end through medium layer sockets; (b) acquiring a group of SRTP encryption keys after the primary negotiation is finished, storing client confirmation information and server end confirmation information, and simultaneously starting encryption transmission of medium data; and (c) initiating renegotiation by virtue of the client or the server end during the encryption transmission of the medium data, and updating the client confirmation information and the server end confirmation information. According to the method, the key negotiation process is sent by virtue of the medium layer sockets, the renegotiation can be initiated by two communication parties in any manner, conversation can be held before and after the encryption keys are dynamically switched, and a medium channel does not need to be destroyed and constructed again.

Description

technical field [0001] The invention belongs to network communication technology, in particular to audio and video encryption technology in network communication. Background technique [0002] In the process of VoIP media communication, the security of media data is particularly important. In VoIP, media data usually uses RTP for data intercommunication, and SRTP (Secure Real-time Transport Protocol) is the most commonly used secure transmission mechanism for RTP. Encrypt RTP data based on key to improve security. The key is very important to the SRTP protocol. The data of both parties in transmission depends on the key for encryption. Therefore, the security of the key is closely related to the data security of both parties in transmission. SRTP itself does not provide key negotiation, and usually uses signaling to exchange, and during a call, the key associated with SRTP is fixed. Usually, the interaction of signaling is cumbersome and inefficient, and the way of exchang...

AI Technical Summary

Problems solved by technology

In the signaling layer, the encryption key is generally directly generated by the initiator and sent to the peer through the SIP protocol. This method relies on other data protection mechanisms in the signaling layer, and the security of the scheme itself is low.

And because the audio and video SRTP encryption is completed at the media layer, the signaling layer still needs to issue the key after the negotiation is completed. Every time the key needs to be changed, the media layer session will be interrupted, and the media channel needs to be recreated.

Images