會談啟始協議應用於網路電話

SIP Security Issue For VoIP

楊竣吉(yang chün chi)

指導教授 ： 李正吉 ； 黃秀園

亞洲大學/資訊學院/電腦與通訊學系碩士班/碩士(2007年)

摘要

網路電話是一種人們重視的網路應用服務，因為傳統電信費用的昂貴，致使人們想追尋更低費用且方便的語音服務，因網際網路快速發展，讓網路電話又被人們所重視，網路電話盛行至今，其仍有許多問題等待解決，本文就網路電話眾多協議中的會談啟始協議，來加以討論，分析並指出其安全風險，著重於認證相關研究，並提出ㄧ套新的認證方法來抵禦已知的安全性危險，並做一系列安全及效率分析，最後做出結論以及未來展望。

關鍵字

網路電話、會談啟始協議、認證

並列摘要

VoIP (Voice over IP) is to pay much attention to network application service. The traditional telecommunication was very expensive that caused people pay more attention to VoIP for more cheap and convenient. Because the developing of network is very fast and people pay more and more attention to VoIP, there were some problems of VoIP and waiting for a solving. This thesis wants to discuss the Session Initiation Protocol (SIP) of many protocols in VoIP and try to point out the weaknesses and threatens in the protocols. Our main research is about the authentication and we advanced a new authentication scheme to resist these dangers of security. Then we analyze the security and efficiency of this thesis. Finally, we did our conclusion and our goal in the future.

並列關鍵字

VoIP, Session Initiation Protocol, Authentication

參考文獻

[37] Kumar Mangipudi, Rajendra Katti, and Huirong Fu, “Authentication and Key Agreement Protocols Preserving Anonymity”, International Journal of Network Security, Vol.3, No.3, pp.259–270, Nov. 2006.

[17] Chwei-Shyong Tsai, Cheng-Chi Lee, and Min-Shiang Hwang, “Password Authentication Schemes: Current Status and Key Issues”, International Journal of Network Security (IJNS), vol. 3, no. 2, pp. 101-115, 2006.

[6] 張家榮，〈健康照護數位親人之研發〉，台中健康暨管理學院資訊工程學系碩士班，畢業論文，民九十四年五月。

[8] 黃明祥、林詠章編著，《資訊與網路安全概論》，臺北，美商麥格羅‧希爾國際股份有限公司台灣分公司，初版，民九十四年九月。

[11] S. M. Bellovin and M. Merritt, “Encrypted key exchange : Password based protocols secure against dictionary attacks”, IEEE symposium on research in security and privacy, pp. 72-84, 1992.