基于SIP的信令安全网关安全模块

摘要

GB/T 28181 standards formulate information transmission, switching,control technology requirements of security video surveillance network system, as an application server, the signaling security gateway is responsible for receiving or forwarding the SIP signaling between domains, adding identification and authentication. This paper analyzes the basic functional requirements of signaling security gateway, proposes design of security module. It achieves authentication, confidentiality and integrity of information by encrypting, decrypting the forwarding signaling and digital signature. This design has better performance and stability through the actual running.%GB/T 28181标准制定了安全防范视频监控联网系统信息传输、交换、控制技术要求，其中信令安全路由网关是一种应用服务器，负责接收或转发域内外SIP信令，完成信令安全路由网关间信令身份标识的添加和鉴别等功能。本文通过分析 GB/T28181标准中信令安全网关的基本功能需求，提出信令安全网关安全模块的设计方案。它通过对域内外转发的信令进行加解密和数字签名操作实现了身份认证、信息保密性和完整性的安全保障。通过实际运行测试出此设计方案具有较好的性能和稳定性。