運用IPsec支援H.323安全需求之研究

Abstract

H.323 是由 Internet Telecommunications Union (ITU) 所制訂的，它提供在IP 網路上音訊、視訊和資料傳輸的基礎。 IPsec是由IETF (Internet Engineering Task Force) 成立的 IP Security Protocol Working Group 所制訂出一系列關於 IP 層的安全協定標準，目的在改善網際網路資料通訊安全，內容包括安全架構的制訂、身份驗證、資料的加解密以及金鑰管理等。 本研究之目的是希望能夠運用 IPsec 為網際網路上的多媒體傳輸標準 H.323 提供安全機制，以確保多媒體資料傳輸的私密性和安全性，本研究將建立一個以 FreeBSD/IPsec 為基礎的模擬環境，開發 H.323 模擬器，來驗證用IPsec 來支援 H.323 安全需求的可行性。

The H.323 standard is a umbrella recommendation form the International Telecommunications Union (ITU). It's provides a foundation for audio, video, and data communications across IP-based network. Internet Engi-neering Task Force (IETF) Internet Protocol Security (IPsec) Working Group developed a set of security protocols to provide security over Internet. These protocols are about IP security architecture, security service, encryption algorithm, authentication algorithm and key management. This paper will study both H.323 and Ipsec standards. Discuss the security requirements of H.323 and using IPsec to support these requirements. Then a H.323 simulation integrated with IPsec on FreeBSD will be developed to show the feasibility.