以IP位址管理為方法加強VOIP的安全性

Increasing Security of VOIP Based on IP Address Management Approaches

陳志達 ； 陳炫旻

《數位教學暨資訊實務研討會》 第五屆 (2010/03) Pp. 1-15

https://doi.org/10.29839/SWJX.201003.0015

摘要

隨著網路電話的日漸普及，網路電話已經被廣泛的應用在各企業內部。在以往的網路電話設計均是以SIP(Session Initiation Protocol)協定為導向，但隨著駭客與木馬程式的氾濫，當網路電話遭受入侵時，一連串的盜打、竊聽等，就會造成網路電話的安全問題一一浮現，而目前IPAM(IP Address Management)正可以將IP分配的問題、IP與MAC盜用的問題、管理OS漏洞更新的問題一一解決，因此本文就將IPAM的觀念導入網路電話中，運用網路電話登入伺服器前先行針對使用者的身分、IP及MAC三者加以確認比對伺服器內資料是否正確，如正確則通過，並藉由多媒體語音控制加入安全即時傳輸協定SRTP(Secure Real-time Transport Protocol)將語音或影像資料以加密機制達到安全的效果，冀望能將網路電話的安全在登入前與傳輸中做好安全的保護，提供給校園或企業在網路電話中有更安全的環境。

關鍵字

SIP ； SRTP ； 加密 ； 協定

並列摘要

With the growing popularity of Internet telephony, IP telephony has been widely used within enterprises. In the past, design of network telephone is based on SIP (Session Initiation Protocol) accord-oriented, but with the proliferation of hackers and Trojans, the Internet telephone time of the invasion, a series of Daoda, wire-tapping and so on, the security issues of the Internet telephone emerge as a result. Therefore, IPAM (IP Address Management) is exactly the solution to the distribution of IP, IP and MAC theft problems, and the management of OS vulnerability updating for the time being. Accordingly, the concept of IPAM will be directed into the phone network. Confirm the users' identity, IP and MAC in the information of the server before using the Internet phone to log into the server. If the informaiton is correct, the users can log in. Besides, we can use the multimedia voice control by adding Secure Real-time Transfer Protocol (SRTP), which can encrypt the voice and video information, to achieve the security effect. We hope to provide the campus or business with a more secure environment before logging and within the transmission if we manage IP address and increase the encryption mechanisms.

並列關鍵字

SIP ； SRTP ； Encryption ； Protocol