A multi-level cross-domain device certificate management system based on sip architecture

Abstract

The invention discloses a multi-level cross-domain device certificate management system based on SIP architecture, which includes multiple client terminals (1), equipment terminals (2), multiple SIP proxy servers (3), SIP Redirection server (4); Wherein: possess at least one SIP proxy server (3) in different domains, each domain possesses at least one client end (1) and device end (2), and the client end (1) Connect with the device side (2) for data communication; the SIP redirection server (4) is in all domains simultaneously; all of the device side (2), the SIP proxy server (3) and the SIP redirection server The directed server (4) is provided with common public key encryption and decryption keys. This application uses a dynamic key to achieve authentication. At the same time, in the process of generating the key, the address of the two parties in the session and the domain information are used to generate the key. Therefore, when the file is decrypted, domain authentication is required, so as to further Ensure the security of communication.

Description

technical field [0001] The invention relates to the technical field of communication security, in particular to a multi-level cross-domain device certificate management system based on the SIP architecture. Background technique [0002] SIP (Session Initiation Protocol, Session Initiation Protocol) is a multimedia communication protocol formulated by IETF (Internet Engineering Task Force, Internet Engineering Task Force). It is a text-based application-layer signaling control protocol for creating, modifying, and releasing sessions of one or more participants, which can be Internet multimedia conferences, IP telephony, or multimedia distribution. Participants in a session can communicate via multicast, mesh unicast, or a mixture of the two. Widely used in CS (Circuit Switched, Circuit Switched), NGN (Next Generation Network, Next Generation Network) and IMS (IP Multimedia Subsystem, IP Multimedia Subsystem) networks, can support and apply to voice, video, data and other mul...

AI Technical Summary

Problems solved by technology

[0012] (1) In the prior art, when performing data communication, there is usually only one communication channel, that is, as a channel for establishing communication, and as a channel for specific data communication after establishing communication, which is a single-channel communication mode, but If you use a single-channel communication mode to communicate in different domains, the communication channel will be occupied for a long time, which will inevitably lead to congestion of the communication channel, which is not conducive to establishing a large number of communication connections

[0013] (2) In the prior art, the encryption and decryption of communication usually adopt the form of public key encryption and decryption, that is, the form of symmetric key, but this kind of key authentication is easy to cause the password to be leaked, making communication insecure the behavior of

[0014] (3) In the prior art, even if there is a form of using a dynamic key, the dynamic key can be used for a certain period of time, so if it is obtained by other devices, it may still lead to an unsafe situation

[0015] (4) The certificates for devices are usually static certificates, and the long-term use of certificates will lead to the risk of leakage

But so far, there is no effective way to solve the above technical problems in the prior art

Images