Research And Realization Of Network Security Providing In SoftSwitch

With the coming of NGN, the telecom network will come into the era of packets network based on IP. Since the legacy telecom network is unattached, it has the better security. As the core technique of NGN, Softswitch is open network and supports multi-services, so it will face more complicated security environment. This paper starts with the brief introduction of softswitch, then analyses the security hidden trouble in softswitch and discusses 3 security providing ways in detail. They are to make use of the following: AAA Server&management Server; the security protocol such as IPSec,SSL,etc; the middlebox of FW&NAT. Then some key technique of above 3 ways is provided: The solution for controlling signal and media stream to penetrate Firewall and NAT of private network is described. Also the security protocols of IPSec,SSL/TLS,MPLS are analysed and compared. Then how to select and make use of above 3 security protocols in SoftSwitch is studied. Integrating with actual practice, the author gives module design of parts in softswitch environment which have relation with network security providing. The module of how to provide AAA Server&management Server, how to select and apply the security protocols and how to protect the endpoint with the middlebox are described. The paper provides the security from the following 3 ways: authentication provided, network protection and endpoint protection. Then the design of MPLS VPN is described and compared with the one provided above. There is no perfect design for the network security providing in softswitch. In the very end of this paper, some preparative modules of the future realization are described to guarantee the scalability.