论文部分内容阅读
随着3G、4G的发展,IMS平台已经成为国内外主流运营提供多媒体通信的核心网,用户接入侧也向IMS接入和移动互联网转变,使得原本封闭的用户通信系统面向互联网和移动互联网开放,带来通信便利性的同时也带来了通信安全性的问题.本文提出了一种针对IMS用户接入侧的IP通信应用层防火墙即会话边界控制器设计实现方法,提出了采用信令和媒体分离的系统结构,并给出了拓扑隐藏、NAT穿越、代理注册等重点功能实现要点.最后通过实际组网测试表明本方法能有效隔离IM S接入侧通信系统保障IP通信的安全.
With the development of 3G and 4G, the IMS platform has become the core network for providing multimedia communication in mainstream operations both at home and abroad. The access side of the subscriber also changes to the IMS access and mobile Internet, making the originally closed user communication system open to the Internet and the mobile Internet , Bringing communication convenience and communication security at the same time.This paper presents a design and implementation of IP communication application layer firewall that is the session border controller for IMS user access side, Media separation system structure, and gives the key points of topological hiding, NAT traversal, proxy registration and other key points.Finally, the actual network test shows that this method can effectively isolate IM S access side communication system to ensure IP communication security.