Patent ID: 7992000
Filing Date: 2011-08-02
Classification: H04L

Abstract:
1. A Session Initiation Protocol (SIP) authentication method, comprising: sending, by a client end, a first request message without authentication information to a server end to request for access; sending back, by the server end, a first response message containing authentication exchange information of the server end and Diffie-Hellman (DH) authentication response information of the server end; authenticating, by the client end, the server end according to the first response message, and sending by the client end a second request message containing authentication information of the client end to the server end, after the authentication of the server end is passed, wherein the authentication information of the client end comprises: DH authentication response information of the client end, or, authentication exchange information of the client end and DH authentication response information of the client end; authenticating, by the server end, a user of the client end according to the second request message containing authentication information of the client end, and sending back by the server end a second response message which contains the authentication information of the server end, wherein the process of authenticating by the server end a user of the client end according to the second request message comprises: authenticating, by the server end, the second request message according to a user name and an initial key if the header field of the second request message does not contain the authentication exchange information of the client end; obtaining, by the server end, a shared key according to the authentication exchange information of the client end and authentication exchange information of the server end, and authenticating, by the server end, the second request message according to the shared key, if the header field of the second request message contains the authentication exchange information of the client end; and authenticating, by the client end, the legality of the server end according to the second response message.