本文選題：因特網(wǎng)協(xié)議語音 + 密鑰管理��； 參考：《電子科技大學(xué)》2015年碩士論文

【摘要】：POS機(jī)生產(chǎn)廠商比較繁雜,本身安全保障越來越令消費(fèi)者擔(dān)憂,將來的某一天,POS機(jī)需要能夠選擇定制VoIP加密方式,以確保用戶信息保密性。為此,VoIP通信密鑰管理系統(tǒng)方案設(shè)計(jì)與研究是非常必要的。本文主要研究應(yīng)用于POS機(jī)刷卡通信的VoIP系統(tǒng)密鑰管理方案。首先,在課題研究背景下,分析當(dāng)前VoIP技術(shù)和現(xiàn)狀,尤其關(guān)注VoIP在POS機(jī)刷卡通信的應(yīng)用場景。其次,分析VoIP密鑰管理系統(tǒng)方案的需求。研究當(dāng)前VoIP系統(tǒng)中主要的通信協(xié)議,提取VoIP通信系統(tǒng)需求的安全問題和主要的需求。第三,對系統(tǒng)進(jìn)行總體結(jié)構(gòu)設(shè)計(jì)。設(shè)計(jì)總體架構(gòu)以及安全子模塊,并且研究安全技術(shù)相關(guān)的密鑰管理系統(tǒng)方案專業(yè)知識。第四,進(jìn)行VoIP安全通信系統(tǒng)的設(shè)計(jì)和實(shí)現(xiàn)。設(shè)計(jì)了兩種分別基于身份和三叉密鑰樹的雙線性Diffie-Hellman假設(shè)的可認(rèn)證雙方密鑰協(xié)商方案和分布式多方密鑰管理方案,并通過分析驗(yàn)證這兩種方案的有效性,最后在嵌入密鑰管理安全子模塊實(shí)現(xiàn)時(shí)應(yīng)用到此兩種方案實(shí)現(xiàn)訪問控制和密鑰管理。本文實(shí)現(xiàn)了VoIP安全通信終端系統(tǒng),按照密鑰實(shí)現(xiàn)方式為端到端加密方式進(jìn)行數(shù)據(jù)的加解密,使用了完全加密的密鑰管理技術(shù),達(dá)到VoIP通信安全性和實(shí)時(shí)性的需求,使得VoIP秘密通信得到了保障。通過實(shí)驗(yàn)數(shù)據(jù)表明,VoIP安全終端進(jìn)行多組兩個(gè)終端之間POS機(jī)通信反復(fù)測試后,通過抓包解析,系統(tǒng)穩(wěn)定可靠,沒有丟包,音頻信號以及清晰生動(dòng)的畫面沒有明顯的失真,POS機(jī)密態(tài)通信成功;另外數(shù)據(jù)吞吐量和密鑰協(xié)商時(shí)間消耗都在接受范圍內(nèi);另外對加解密后的音頻語音質(zhì)量MOS指標(biāo)進(jìn)行測試,表明本文的加解密效果較好。
[Abstract]:The manufacturers of POS machines are more and more complicated, and their own safety and security are more and more worrying to consumers. In the future, POS machines need to be able to choose customized VoIP encryption to ensure the confidentiality of user information. Therefore, it is necessary to design and research VoIP key management system. This paper mainly studies the key management scheme of VoIP system which is applied to POS swipe card communication. First of all, under the background of the research, we analyze the current VoIP technology and present situation, especially pay attention to the application of VoIP in POS. Secondly, the demand of VoIP key management system is analyzed. The main communication protocols in VoIP system are studied, and the security problems and main requirements of VoIP communication system are extracted. Third, the overall structure of the system design. Design the overall architecture and security sub-module, and research security technology related key management system solution expertise. Fourth, the design and implementation of VoIP secure communication system. Two authenticated two-party key agreement schemes and distributed multi-party key management schemes based on identity and triple key tree are designed, respectively. The validity of the two schemes is verified by analysis. Finally, the two schemes are applied to implement access control and key management in embedded key management security sub-module. In this paper, the VoIP secure communication terminal system is implemented, which encrypts and decrypts the data for end-to-end encryption according to the key implementation mode, and uses the key management technology of complete encryption to meet the demand of security and real-time of VoIP communication. VoIP secret communication is guaranteed. The experimental data show that the VoIP security terminal has repeatedly tested the POS communication between two groups of terminals, and by grasping packet analysis, the system is stable and reliable, and there is no packet loss. The audio signal and the clear and vivid picture have no obvious distortion and the POS secret state communication is successful; in addition, the data throughput and the consumption of key negotiation time are both within the accepted range; in addition, the MOS index of audio quality after encryption and decryption is tested. The results show that the effect of encryption and decryption is good.
【學(xué)位授予單位】：電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2015
【分類號】：TN918.4

【參考文獻(xiàn)】

相關(guān)期刊論文 前2條

1 王志偉,谷大武;基于樹結(jié)構(gòu)和門限思想的組密鑰協(xié)商協(xié)議[J];軟件學(xué)報(bào);2004年06期

2 戚建勛;;VoIP安全問題和解決方案[J];中國新通信;2007年11期

，

本文編號：2057865