Research And Implementation Of Security Mechanism Of SIP Conference

With the continuous development of society and progress, the traditional pattern of the meeting has been difficult to meet the needs of social development, and the video conference system in the aspect of work and production efficiency shows greater advantage. SIP to use simple, strong scalability characteristics is gradually becoming the core of the video conference system. But at the moment for research focuses more on practicability of the SIP conference, but often ignored the security problems of the SIP conference.According to the above problem, in this thesis, the security mechanism of SIP conference for the following research:1. In order to end products of the company as the background, analyzes the security of SIP conference at the root of the problem, and summed up the authentication and encryption for this thesis research direction.2. The traditional HTTP digest authentication, TLS and S/MIME process were studied, and summarized their working process, suitable scene, advantages and disadvantages, on this basis to determine the security mechanism of combination of authentication and encryption.3. On the basis of the framework of the company's products, from the perspective of assuring the confidentiality and integrity of signaling, the HTTP digest authentication is improved and designed the end-to-end encryption, completed authentication and encryption security mechanism, and the effectiveness of the proposed mechanism is analysed in theory.4. The existence of SIP conference security threat is verified by experiment, and then on the basis of the products of the company to implement the security mechanism, and then was tested, and the results are analyzed, and the experiment proves the effectiveness of the security mechanism.The authentication and encryption security mechanism designed in this thesis can guarantee the SIP conference is not affected under the premise of normal business functions, improve the security of SIP conference, therefore, the paper research results has a certain application prospect.