Summary: | 碩士 === 國立中央大學 === 通訊工程研究所碩士在職專班 === 96 === With the progress of the network, peoples can communicate with each other easily. The popularization of the Broadband network makes many things that could be hard to achieve becoming possible. However, the threat of SPIT is likely to increase as the more flexible SIP multimedia standard becomes more popular.
Spam over IP Telephony (SPIT) is expected to become a serious problem in near future. It has the potential to become an even bigger problem than email spam, because the callee will be disturbed by each received SPIT call.
This paper describes how to based on SDES to achieve SRTP master key exchange on voice authentication, integrate SRTP and SIP to SRTP_UE and then use session key derived from master key to protect real-time voice communication from eavesdropping.
A new SPIT prevention method that is effective and acceptable for the call participants because it does not affect the callee at call and limits the interaction with caller to an acceptable minimum. Using SRTP with DTMF to simulate ASR (Automatic Speech Recognition), meanwhile propose a system model for VoIP ID (It’s likely Citizen Digital Certificates) on authentication servers. The general concept may be applied for different data in the meanwhile, for instance, one idea would be to ask all clients to register a unique and valid mobile phone number for each VoIP ID.
As foundation for building general SPIT prevention systems with this and other innovative methods, this paper proposes reference architecture for SPIT prevention systems.
|