信息安全研究 ›› 2016, Vol. 2 ›› Issue (12): 1114-1121.

• 技术应用 • 上一篇    下一篇

视频监控系统中一种基于HTTP摘要 安全认证设计

王永建   

  1. 中国通信建设集团设计院有限公司
  • 收稿日期:2016-12-26 出版日期:2016-12-15 发布日期:2016-12-26
  • 通讯作者: 王永建
  • 作者简介:硕士,高级工程师,IEEE、ACM会员,主要研究方向为信息安全、信息检索、大数据.

Ansafety Authentication Design Based on HTTP Digest for Video Monitoring System

  • Received:2016-12-26 Online:2016-12-15 Published:2016-12-26

摘要: 在平安城市的建设中,视频监控系统中客户端的安全认证非常关键.为了弥补SIP的不足,设计了一种基于HTTP摘要的认证方案.首先简析了SIP与HTTP协议;设计了视频监控系统整体结构,定义了各主要组成部件的功能.然后设计了登录-N注销,获取设备属性列表.最后设计了认证流程、AG的质询消息头、MC的应答消息头、Response参数等实现方案.该设计思路对提高SIP协议的安全性具有一定借鉴意义.

关键词: SIP, SDP, HTTP摘要, 质询, 应答

Abstract: The construction of safe city, it is the key ofsecurity authentication forclien in video monitoring system. In order to make up for the lack of security of SIP, an authentication scheme has been designed based on HTTP digest. Firstly, the principle of SIP and HTTP protocol is analyzed, and it designs the whole structure of video monitoring system, and defines the function of each main component. Then, it designs the scheme of login-Ncancellation and achieving the property list of equipment. Finally, it designs the implementation scheme which include scertification process, chcallenge message header of AG, response message header of MC and parameter of Response. The design idea, in the paper, has a certain reference significance for improving the security of SIP protocol.

Key words: session initiation protocol, session description protocol, HTTP digest, chanllenge, response