UMTS和LTE网络中VoIP通信的不可否认性
Non-Repudiation for VoIP Communication in UMTS and LTE Networks
摘要：
本论文的工作提出了一个体系结构设计的系统，将不可否认的概念到基于IP的数字语音会话（VoIP）在LTE和UMTS网络中，使用电子签名，通过考虑一个集中的方法。此外，功能和技术方法，以支持这样的系统进行了研究。最后但并非最不重要的是，如何引入这一系统作为一个公共和商业服务进行了讨论。如本研究所介绍的，电子签名和相关密码功能提供的不可否认性概念允许使用这些语音对话的数字记录作为具有法律约束力的声明或证明，甚至代替传统的湿签名。该系统被设计为基于IMS的3G和4G网络的子系统，并且旨在与这些网络的当前配置、组件和接口具有最大的兼容性。另一方面，通过位于IMS核心网络中的特殊签名、存储和验证单元来实现不可否认性。建议在IMS的MRF单元中处理语音数据。此外，一个USSD/USSD为基础的特殊解决方案，以启动这些签署的呼吁。根据所提出的方案，在签署的呼叫，两个单向的语音流从双方的呼叫，这是在IP和UDP封装的RTP包传输，接收的签名单元和交织使用它们的到达时间，使它们成为一个统一的流。签名单元生成接收到的包的组的散列，并使用PKI算法和应用散列/签名链接来对它们进行签名，以增加完整性保护并赋予不可否认性。然后，它将包和签名信息转发到存储单元。存储单元保存所有通话记录、签名数据和这些通话的元数据。验证单元随后从存储单元收集相关数据...
英文摘要：
This thesis work presents an architectural design of a system to bring non-repudiation concept into the IP based digital voice conversations (VoIP) in LTE and UMTS networks, using electronic signatures, by considering a centralized approach. Moreover, functionalities and technical methods to support such a system are researched. Last but not least, ways to introduce this system as a public and commercial service are discussed. Non-repudiation concept provided by electronic signatures and related cryptographic functions, as introduced in this study, allow using digital records of these voice conversations as legally binding statements or proofs likewise and even instead of traditional wet signatures. The system is designed as a subsystem to IMS based 3G and 4G networks and maximum compatibility with current configurations, components and interfaces of these networks is intended. On the other hand non-repudiation is achieved by special signature, storage and verification units located in the IMS core network. Voice data is proposed to be processed in MRF unit of the IMS. Additionally, a USSD/USSI based special solution to initiate these signed calls is developed. According to the proposed scheme; during a signed call, two unidirectional voice streams originating from two parties of the call, which are transferred in IP and UDP encapsulated RTP packages, are received by the signature unit and interweaved using their arrival times, so that they become a unified stream. Signature unit generates hashes of groups of received packages and signs them using PKI algorithms and applying hash/signature chaining to increase integrity protection and to empower non-repudiation. Then, it forwards packages and signature information to the storage unit. Storage unit keeps all the call records, signature data and metadata of these calls. Verification unit later gathers relevant data from the storage unit...
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
