| 研究生: |
林佳鴻 Lin, Jia-Hung |
|---|---|
| 論文名稱: |
在大樓安全閘道器下串流安全之研究 Secured Streaming Service with Building Security Gateway |
| 指導教授: |
李忠憲
Li, Jung-Shian |
| 學位類別: |
碩士 Master |
| 系所名稱: |
電機資訊學院 - 電腦與通信工程研究所 Institute of Computer & Communication Engineering |
| 論文出版年: | 2008 |
| 畢業學年度: | 96 |
| 語文別: | 中文 |
| 論文頁數: | 48 |
| 中文關鍵詞: | 隨選視訊 、企業安全閘道器 、串流安全協定 |
| 外文關鍵詞: | SRTP, Building Security Gateway, VOD |
| 相關次數: | 點閱:81 下載:1 |
| 分享至: |
| 查詢本校圖書館目錄 查詢臺灣博碩士論文知識加值系統 勘誤回報 |
VOD (Video on Demand) 架構因為目前的影音分享平台愈來愈紅,雖然這是個成熟的平台,大家使用率也很高,但是我們覺得他還是有不足的地方。
Media streaming在傳輸過程中通常使用RTP (Rea-Time Streaming Protocol)協定,但是在目前的系統中傳送的過程並不具備安全加密的機制,所以我們為這個架構加入SRTP (Secure RTP)協定,使得streaming在傳輸過程中具備加密性與完整性。除了不具備安全的傳輸之外,我們還想說是不是可以為一個能力不足或是無法做改變的播放裝置 ,讓這種的裝置也可以做安全的傳輸。
所以我們提出一個位於大樓安全閘道器,命名為Building Security Gateway (BSG),我們想讓BSG可以幫一些裝置做安全的傳輸,負責家庭或是企業安全傳輸。
實行SRTP之後,我們使用pre-shared key exchange與Diffie-Hellman key exchange兩種key交換作為SRTP master key交換機制。
有了基本的安全改善後,我們再加入media client向BSG註冊的機制。這個機制可以讓media client通知BSG,自己本身可不可以做安全的傳輸。如果media client可以做的話,BSG就會forward封包不處理;如果media client不能做的話,那BSG就會幫忙media client做加解密的動作。
In recent years, the platform of VOD (video on Demand) architecture is becoming more and more popular. It is widely used all over the world, but we make it better for lack of security.
RTP (Real-Time Streaming Protocol) is the protocol defined to sending media streaming. VOD use RTP to send media streaming so it lacks secure transmission. We add SRTP (Secure RTP) protocol in the VOD architecture to provide systems with encryption, message authentication and integrity. Besides that, we are going to create the device that can make it possible to help other devices which are weak processing or can’t do security processing secure.
We create the secure device named BSG (Building Security Gateway) to help other devices have secure transmission in home or enterprise use.
In addition, the key management is required. We use two key exchange mechanism, pre-shared key and Diffie-Hellman key exchange management for SRTP master key exchange.
With the improvement of basic security, we add the function of the media client registers to BSG. The media client will tell BSG whether it can transmit securely or not. BSG will forwards the packet without processing if the media client supports SRTP. However, BSG will help the media client transmit securely if the media client doesn’t support SRTP.
[1]國立成功大學 工程科學系暨研究所 多媒體網路實驗室,RTP2.doc
[2]Alan T.S. Ip, Student Member, IEEE, Jiangchuan Liu, Member, IEEE, and
John Chi-Shing Lui, Senior Member, IEEE “An Architecture of Cooperative Proxy-Client Caching System for On-Demand Media Streaming” IEEE TRANSACTIONS ON PARALLEL AND DISTRIBUTED SYSTEMS, VOL. 18, NO. 1, JANUARY 2007
[3]涂國祥,林盈達 "多媒體串流應用:產品比較與實例分析"
[4]余少棠、黃俊穎、蔡昌憲、張智晴、林盈達,"網路安全閘道器產品評比 – 功能與效能面",國立交通大學資訊科學所
[5]RTSP,RFC2326
[6]Werner Dittmann, "Security for RTP connections"
[7]M. Baugher, D. McGrew, Cisco Systems, Inc., M. Naslund, E. Carrara, K. Norrman, “The Secure Real-time Transport Protocol (SRTP)” IETF RFC 3711, March 2004.
[8]馮輝文,陳永慶,陳穎聰,"安全網路電話中SRTP 的研究與金鑰交換的設計
[9]郭嘉明,李忠憲 ”Adaptive security scheme in session mobility” 全國電信研討會2006.
[10]郭嘉明,李忠憲 ”行動會議上網路電話安全之研究” 九十六年碩士論文
[11]近代密碼學及其應用,賴溪松,韓亮,張真誠編著,旗標出版2003.
[12]維基百科 http://zh.wikipedia.org/
[13]http://linux.vbird.org/
[14]Linux C/C++ 網路程式設計,顧思捷,陳錦輝著,金禾出版2003
[15]C Primer Plus 5/e中文精華增訂版,蔡明志譯,碁2006
[16]次世代Linux Ubuntu玩全手冊,蔡東邦,李聖瑋著,上奇2006
[17]SSL與TLS實務應用,許建隆著,碁出版2005