Security system for passive IP devices on SIP-based networks

Abstract

Session Initiation Protocol (SIP), an easy and simple Internet application layer protocol used to establish a session, and passive Internet Protocol (IP) devices like SIP-based surveillance cameras, form a perspective combination that is on demand in the network market. The only necessity of the predefined network is to acquire a secure mechanism due to the private information that the devices transmit on the Internet network. This thesis proposes an architecture for securing information that passive IP devices deliver into public IP networks. The architecture provides a security mechanism for authentication, authorization, and audit (AAA). The mechanism combines the security features of the authentication server with SIP architecture to provide AAA service to registered users requesting access to passive IP devices. Also, the Authentication-Authorization Database (AADB) that allows device certificate management is introduced. The dynamic password and dynamic session key utilized by the Public Key Infrastructure (PKI) scheme are also introduced to enhance the security features of devices by authenticating and administering user accesses and device accesses. The AAA with the authentication database and dynamic authentication mechanism ensures a secure IP network based on SIP protocol.