A
suite of ten new standards that provide security for IP media communications
such as VoIP or videoconferencing got an update at the last meeting of ITU-T’s Study Group 16.
The security framework outlined in the H.235 series of ITU-T Recommendations
provides the protocols necessary for these media to be authorised and routed.
Equipment using these standards can deliver connectivity without compromising
security.
With the help of the Recommendations, users communicating through IP media are
authenticated and authorized so that their communications are protected against
various security threats. Real-time multimedia encryption adds a further layer
of security, protecting against call interception. The security countermeasures
are designed to thwart service fraud, avoid service misuse and detect malicious
message tampering. H.235 also gives the ability to provide a greater level of
security using public key infrastructure (PKI) certificates.
Additionally, two new security profiles were added to provide [H.235.8] key
exchange using the secure real-time transport protocol (SRTP) in H.323 networks
and [H.235.9] to allow discovery of security gateways in the signalling path
between communicating H.323 entities, in order to preserve signalling integrity
and privacy.