Safety management method of network comprehensive switch on equipment

Abstract

Based on H.248 and MGCP protocols, the method realizes authentication of safety service between networked integrated access device (IAD) and soft exchange equipment. When IAD opens an account, device id code, authorized cipher key, IP address of IADMS or domain name of IAD are configured on IAD. Meanwhile, an authorized cipher key is setup to the soft equipment. In registering procedure, based on IP address of the soft equipment, IAD sends registering information including transaction ID, and device id code to the soft equipment. With registering information sent from IAD being received, the soft equipment determines whether the IAD is a legal IAD based on the registering information. If not, the registration is refjected; otherwise, based on registering information, procedure of validating authority is carried out. MOde of extended packet of standard protocol is adopted in the scheme so that it is compatible to current mode, providing good safety and high efficiency.

Description

technical field [0001] The invention relates to a security management method for network equipment. Background technique [0002] In NGN (Next Generation Network), there are many integrated access devices (IADs), these devices are distributed in enterprises or users' homes, and have the characteristics of wide area, large quantity and dynamic IP-based. Due to the large number of IAD devices, the unified management of the IAD cannot be directly managed by the network management station, and can only be managed indirectly through the IAD management system (IADMS). The current management is usually realized through the media gateway control protocol (MGCP protocol or H248 protocol), which is embodied in the aspect of service registration. Since the MGCP protocol has no security authentication mechanism in the application layer, the H248 protocol has security authentication in the application layer. However, this mechanism needs to add a security header to each H248 protocol tr...

AI Technical Summary

Problems solved by technology

Due to the large number of IAD devices, it is impossible to use the network management station to directly manage the IAD in a unified manner, and can only conduct indirect management through the IAD management system (IADMS)

The current management is usually realized through the media gateway control protocol (MGCP protocol or H248 protocol), which is specifically reflected in the business registration. Since the MGCP protocol has no security authentication mechanism in the application layer, and the H248 protocol has security authentication in the application layer mechanism, but this mechanism needs to add a security header to each H248 protocol transaction request, and return the security authentication result in its transaction response. This way of using the system greatly reduces the efficiency of processing the H248 protocol and is less practical

Due to the above reasons, there are the following problems in the current IAD security certification: First, the fake IAD is easy to imitate the real IAD to make a call, and the fee is included in the real IAD, so that the security of the user's call fee cannot be guaranteed

The second is that illegal IADs are easy to attack SoftSwitch devices (SoftSwitch), system security cannot be guaranteed, and it is easy to cause illegal and counterfeit devices to be included in management; when more illegal and counterfeit devices are brought into management, legal devices will be flooded, and even cause the system to be paralyzed

Images