TERMINAL ACCESS METHOD BASED ON H.323 PROTOCOL APPLIED TO PACKET NETWORK

摘要

A terminal access method based on H.323 protocol applied to a packet network includes the steps of: a gatekeeper authenticating a calling terminal security by using a elliptic curve digital signature of the public key certificate mechanism, and adding the session cryptographic key generated by negotiating with the calling terminal to the signalling of the elliptic curve digital signature of the public key certificate; the calling terminal using a pre-shared secret mechanism to authenticate the security by the session cryptographic key, and to set-up a network access secure channel; the gatekeeper authenticating the receiving terminal security by using the elliptic curve digital signature of the public key certificate mechanism, and adding the session cryptographic key shared with the receiving terminal to the signalling of the elliptic curve digital signature of the public key certificate; the calling terminal and the gatekeeper setting-up a call connection secure channel on the network access secure channel by using a symmetric cryptographic key security mechanism based on the session cryptographic key; on the call connection secure channel, performing a cryptographic algorithm and a cryptographic key negotiation for the real-time media streams communication between the calling terminal and the receiving terminal by using the symmetric cryptographic key security mechanism.