【作者】 吴俊；

【导师】 胡汉平；

【作者基本信息】 华中科技大学 ， 模式识别与智能系统， 2006， 硕士

【摘要】 视频会议系统的安全问题是研究的热点,在H.323视频会议系统的框架下,提出并实现了一种安全解决方案。系统由认证中心、多点控制单元MCU、网守、视频终端等部分组成,认证中心(CA)负责注册、签发、管理和发布网络系统中各种设备和用户的证书;MCU负责对视频、语音及数据信号进行切换;网守(GateKeeper)提供呼叫和管理功能,并对用户终端进行身份认证;视频终端完成视频音频数字信号的压缩编码和解码、视频信号的加密和解密等功能。在基于H.323视频会议系统中引入认证中心,采用基于X.509的数字证书来对用户终端进行单向认证,用户向认证中心(CA)申请证书,认证中心根据证书管理协议(CMP)来实现证书的注册、签发、管理等功能;在召开视频会议前,需要由网守对申请的用户U进行合法性认证,根据认证结果授权用户U进行相应的操作。使用所提出的二维混沌流密码系统有选择地对压缩后的视频数据进行加密来保证视频流的安全性。系统有选择地只对I帧中的离散余弦变换系数的符号位进行加密,由于压缩算法采用差分编码的方式,I宏块的解密错误势必导致P和B宏块解码错误,由这些宏块的数据很难正确地恢复视频信息。因此,在不降低安全性的前提之下,明显地减少了加解密的数据量,大大提高了加解密速度。最后,对混沌视频流和加解密系统进行了测试,对混沌伪随机序列的测试表明密钥流服从均匀、独立分布,因而具有较高的安全性;对加解密系统的测试表明系统在保证实时性和容错性的同时,大大提高了视频会议系统的安全性。更多还原

【Abstract】 The security of videoconferencing system is becoming the research focus and increasingly important. In this paper, a security solution based on H.323 videoconferencing system is presented.The videoconferencing system includes Certificate Authority, MCU, Gatekeeper and Terminal. Certificate Authority is in charge of the registration and management of users’certificate; MCU switches video, audio and data signal; GateKeeper manages call procedure and teminal authentication; Video terminal makes compress and decompression process, it also in charge of encryption and decryption process.The solution proposes a one-way authentication method based on X.509 Digital Certificate to solve the security problem of username-password authentication method. Certificate Authority implements registration and management according to the Certificate Management Protocol. Before the videoconferencing, Gatekeeper should authenticate users’validity and manage users’operation.The solution advances a video steam encryption method using two-dimensional chaotic stream encrypting algorithm. It selectively encrypts signs of DCT coefficients.In conclusion, this article tests the chaos streaming and encryption system. The test of chaos streaming shows that it is highly independent and identically distributed; The test of encryption system demonstratesthe the security, real-time performance and fault-tolerance of the solution.更多还原