论文标题
UMTS和LTE网络中VoIP通信的不替代
Non-Repudiation for VoIP Communication in UMTS and LTE Networks
论文作者
论文摘要
这篇论文的工作介绍了系统的建筑设计，以通过考虑集中式方法，将非替代概念带入LTE和UMTS网络中的基于IP的数字语音对话（VOIP）。此外，研究了支持这种系统的功能和技术方法。最后但并非最不重要的一点是，讨论了作为公共和商业服务引入该系统的方法。正如本研究中介绍的电子签名和相关加密功能提供的非替代概念，允许将这些语音对话的数字记录作为具有法律绑定的陈述或证明，甚至代替传统的湿签名。该系统被设计为基于IMS的3G和4G网络的子系统，并且目的是这些网络的当前配置，组件和接口的最大兼容性。另一方面，通过位于IMS核心网络中的特殊签名，存储和验证单元来实现非纠正。建议在IMS的MRF单元中处理语音数据。此外，开发了基于USSD/USSI的特殊解决方案来启动这些签名的呼叫。根据拟议的计划；在签名的呼叫过程中，由签名单元收到了来自IP和UDP封装的RTP软件包的两个单向语音流，这些语音流来自呼叫的两个各方，这些语音流是通过IP和UDP封装的RTP软件包传输的，并使用其到达时间交织在一起，以便它们成为统一的流。签名单元生成了接收包装组的哈希，并使用PKI算法和应用哈希/签名链条对其进行签名，以增加完整性保护并赋予非替代能力。然后，它将软件包和签名信息转发到存储单元。存储单元保留这些呼叫的所有呼叫记录，签名数据和元数据。验证单元后来收集来自存储单元的相关数据...
This thesis work presents an architectural design of a system to bring non-repudiation concept into the IP based digital voice conversations (VoIP) in LTE and UMTS networks, using electronic signatures, by considering a centralized approach. Moreover, functionalities and technical methods to support such a system are researched. Last but not least, ways to introduce this system as a public and commercial service are discussed. Non-repudiation concept provided by electronic signatures and related cryptographic functions, as introduced in this study, allow using digital records of these voice conversations as legally binding statements or proofs likewise and even instead of traditional wet signatures. The system is designed as a subsystem to IMS based 3G and 4G networks and maximum compatibility with current configurations, components and interfaces of these networks is intended. On the other hand non-repudiation is achieved by special signature, storage and verification units located in the IMS core network. Voice data is proposed to be processed in MRF unit of the IMS. Additionally, a USSD/USSI based special solution to initiate these signed calls is developed. According to the proposed scheme; during a signed call, two unidirectional voice streams originating from two parties of the call, which are transferred in IP and UDP encapsulated RTP packages, are received by the signature unit and interweaved using their arrival times, so that they become a unified stream. Signature unit generates hashes of groups of received packages and signs them using PKI algorithms and applying hash/signature chaining to increase integrity protection and to empower non-repudiation. Then, it forwards packages and signature information to the storage unit. Storage unit keeps all the call records, signature data and metadata of these calls. Verification unit later gathers relevant data from the storage unit...
