The Research And Implementation Of IP Phone Security Based On SIP

IP Phone is a technology by which the packet of voice can be transferred over the IP networks,which can be attacked easily because of its open. With the popularity of IP Phone,people attach importance to its security. The thesis begins with the state of Internet security problem,analyzes the major factors that threaten Internet security. Then,the thesis researches the main security technologies of IP Phone which are AAA,Encryption,Secure hash,Digital Signature and IPSec. AAA is used for authentication,authorization and Accounting; Encryption includes Symmetrical Encryption and Public Key Encryption,Symmetrical Encryption can be used for data Encryption easily,Public Key Encryption can be used to transfer key in security; Secure hash can be used to check the data integrity; Digital Signature can be used for data origin authentication; IPSec can provide security services which include data confidentiality,data integrity and data origin authentication through the Internet Key Exchange(IKE) Protocol,Authentication Header Protocol(AH) and Encapsulating Security Payload(ESP) Protocol. Then,the thesis shows a scheme of secrecy IP Phone. In the scheme,IPSec is used to achieve the secure communication. The thesis gives the design of IPSec module and analyzes its flow,then the thesis gives the hardware design of secrecy IP Phone, the highly-integration chip—PA1688 is used in it,which makes the design and implementation easier and the cost less. In the end,the thesis gives the design of secure IP telephone system,which can authenticate and authorize through RADIUS,transfer data safely through the secrecy IP Phone.