Ip Telephony Security Technology Research And To Achieve

This project is from CNISTEC (China National Information Secure Testing and Evaluation Center) .Now , the project has been completed, and will be authenticated in April ,2001. In this paper I analyzed the kcure problems of H323 LP phone application when used in enterprise enviroment in detail : First 71 bringed up the secure requirements to the IP Phone application ;then ,I analyzed the secure loophole ;according to the secure requirement ,I presented the secure service which was needed to solve the secure leak .Then to chose the appropriate cryptographic algorithm and protocol to construct a secure model After analyzing the vulnerability of the secure model and proving its security ,I gave the implement of the secure model in the end ,I compared my secure model with the custom scheme and presented what needed to be done the next step. In this paper ,I bringed up a secure scheme which used SRP protocol as the authentication protocol ,used IDEA to encipher the control information and voice data of the IP Phone application ,and used symmetrical cryptographic key exchange protocol as my key exchange protocol . And I gave the implement of the secure scheme which used a group of secure set.