目前，会话初始协议(SIP)大部分认证机制只提供了服务器到客户端的认证，H ITI P摘要

认证便是其中的一种。分析了这种机制容易遭受服务器伪装攻击和密码窃取攻击的缺陷，提出了一

种弥补这些缺陷的安全认证机制。试验表明该算法具备较高的效率。-At present, the Session Initiation Protocol (SIP) authentication mechanism most only provide a server to the client authentication, H ITI P summary of certification is one of them. Analysis of such a mechanism are vulnerable to server spoofing attacks and password theft attacks defects, a make up for deficiencies in the safety of these authentication mechanisms. Tests show that the algorithm with higher efficiency.