臺灣博碩士論文加值系統

隨著全球網路科技的發展，讓我們的生活已經離不開網路，由於現今的網路的服務快速性與便利性，使用網路通話技術(Voice over IP, VoIP)進行通話已經非常普遍，且其服務品質也已經有一定的水準，但是在網路環境中傳送資料是不安全的，需要適當的保護避免被竊聽、竄改，因此利用網路進行通訊的安全性就顯得十分重要。為了防範網路上對於網路通訊架構的惡意攻擊，除了利用現有的通訊協定來對資料進行保護之外，也可以從密碼學的角度著手加強安全性。
本論文從密碼學的角度提出了一種加密架構，它是利用對稱式區塊加密機制中的換位與重排運算，搭配本論文提出的一種具有可逆性與兩個輸入之特徵的隨機環狀序列(RCS)所建立的動態加密方法，接著將此架構套用至以網路架構為基礎的語音資料傳輸技術中對資料進行加密實驗與分析，最後根據實驗證明所提出的架構能夠達到資安規範的機密性。

Since the advance of science and technology, Internet has become an inseparable part of our life. Voice over IP (VoIP) call is already very widespread, and has a certain quality of service standards. Generally, VoIP is running under insecure Internet environment. In order to prevent security attacks from Internet communications in the network, in addition the use of the existed protocol for the data protection. Cryptography can also proceed from the perspective of strengthening security.
This thesis proposes an encryption structure. The structure according to this thesis proposed random circular sequence (RCS) algorithm for data encryption. RCS proposed three characteristics, as long as the two inputs to generate a sequence, the sequence is based on a cyclic structure, and the sequence is generated virtually and random. Encryption architecture is the use of cryptography to encrypt blocks of two features combined with RCS sequence, two inputs as private key, and RCS is reducible.
Finally, the applied to encrypted voice data transmission research and analysis in network. Results show that the encrypted structure can be securely transmitted in the network.

中文摘要 i
英文摘要 ii
致謝 iv
目錄 v
表目錄 vii
圖目錄 viii
一 緒論 1
二 加密技術與聲音訊號處理的相關探討 3
2.1 對稱式加密法 3
2.1.1 對稱式加密機制 3
2.1.2 現代區塊加密法 7
2.2 訊號數位化處理 12
2.2.1 類比聲音訊號 12
2.2.1 脈波編碼調變(Pulse code modulation, PCM) 14
2.3網路通話技術(VoIP) 20
2.3.1 H.323協議 20
2.3.2 媒體閘道控制協定(MGCP) 22
2.3.3 會談發起協定(SIP) 23
2.3.4 協定分析與安全性分析 26
三 以虛擬隨機環狀序列動態加密的機制 28
3.1 隨機環狀序列 29
3.1.1產生隨機環狀序列演算法 31
3.1.2反解隨機環狀序列演算法 34
3.2隨機環狀序列實例 36
3.2.1 產生隨機序列 36
3.2.2 反解隨機序列 39
3.3利用隨機環狀序列對資料進行動態加密 42
四 實驗結果與評估 46
4.1 隨機環狀序列實驗結果 46
4.2利用隨機環狀序列加密實驗結果 49
4.3 將加密應用於VoIP環境 57
五 結論與未來研究方向 61
參考文獻 62

[1]賴榮樞 譯 William stalling原著，"密碼學與網路安全第四版"，台灣培生教育出版股份有限公司，2007.
[2]李南逸、王智弘、林峻立、張智超、溫翔安、葉禾田 譯 Behrouz A. Forouzan 原著，"網路安全與密碼學概論"，滄海圖書，2008.
[3]鄧名言，"應用變化型虛擬亂數與串流加密技術於對稱式加密機制之研究"，國防大學，碩士論文，2009.
[4]周旭東，"以虛擬亂數為基之對稱式區塊加密機制研究"，國防大學，碩士論文，2008.
[5]楊欽舜，"應用虛擬亂數於動態對稱式區塊加密機制之研究"，國防大學，碩士論文，2009.
[6]許秋明，"網際網路即時影像及語音傳輸系統之研究與設計"，國立成功大學，碩士論文，2005.
[7]劉正斌，"以SIP網路電話為基礎探討穿越防火牆及NAT之技術研究"，國立中正大學，碩士論文，2005.
[8]陳冠中，"以SIP為基礎之階層式細微化位置資訊整合系統"，國立成功大學，碩士論文，2002.
[9]莊承翃、張佑瑋、蕭衛鴻、蘇致遠 譯 BEHROUZ A. FOROUZAN原著，"TCP/IP通訊協定第四版"，全華書局，2011.
[10]韓鑫偉，"無線區域網路之視訊電話系統的研究"，銘傳大學，碩士論文，2005.
[11]駱俊霖，"VoIP可用性之模擬研究"，中國文化大學，碩士論文，2009.
[12]徐悟梵，"DDoS攻擊及防火牆之研究：以VoIP與視訊會議為例"，中國文化大學，碩士論文，2010. 
[13]William stalling, “Cryptography and Network Security 5/E” , Prentice Hall, pp. 32-38 & pp. 193-198, 2010.
[14]J. Grossschadl, S. Tillich, C. Rechberger, M. Hofmann, and M. Medwed, "Energy Evaluation of Software Implementations of Block Ciphers under Memory Constraints," in Design, Automation & Test in Europe Conference & Exhibition, pp. 1-6, 2007.
[15]Dick Pountain, "Concise Dictionary of Computing." Penguin Reference – Penguin Books.
[16]Fadi Abdelqader, “Examples to create your Conferencing System in .NET, C# VOIP & Video Conferencing Systems using H.323 and TAPI 3”, http://www.codeproject.com/KB/IP/Video_Voice_Conferencing.aspx?msg=2688325, Jan 2007.
[17]J Broesch "Digital Signal Processing: Instant access", Newnes , 2008.
[18]CCITT G.711 Pulse Code Modulation(PCM) http://ckp.made-it.com/pcm.html.
[19]L. Wanjiun, "Mobile Internet telephony: mobility extension to H.323," Vehicular Technology, IEEE Transactions on, vol. 50, pp. 1403-1414, 2001.
[20]T. Dagiuklas and P. Galiotos, "Architecture and design of an enhanced H.323 VoIP gateway," in Communications, 2002. ICC 2002. IEEE International Conference on, pp. 1209-1213 vol.2, 2002.
[21]A. K. Shrestha, "Security of SIP-based infrastructure against malicious message attacks," in Software, Knowledge, Information Management and Applications (SKIMA), 2014 8th International Conference on, pp. 1-8, 2014.
[22]H. Schulzrinne and J. Rosenberg, "The IETF Internet telephony architecture and protocols," Network, IEEE, vol. 13, pp. 18-23, 1999.
[23]U. U. Rehman and A. G. Abbasi, "Security analysis of VoIP architecture for identifying SIP vulnerabilities," in Emerging Technologies (ICET), 2014 International Conference on, pp. 87-93, 2014.
[24]E. Coulibaly and L. Lian Hao, "Security of Voip networks," in Computer Engineering and Technology (ICCET), 2010 2nd International Conference on, pp. V3-104-V3-108, 2010.
[25]Ellis Horowitz, Sartaj Sahni, and Susan Anderson-Freed, "Fundamentals of Data Structures in C, 2nd Edition", Silicon Press, Baker & Taylor, Barnes & Noble, Amazon.com, 2007.