A method for Real-time Transport Protocol (RTP) packet authentication on a
packet data network. In particular, the invention relates to a method for
preventing toll fraud, privacy compromise, voice quality degradation, or
denial of service (DoS) on Voice over IP networks. The Real-time
Transport Protocol (RTP) is susceptible to several security attacks,
including thirdparty snooping of private conversations, injection of
forged content, and introduction or modification of packets to degrade
voice quality. The Secure Real-time Transport Protocol (SRTP) provides
confidentiality, message authentication, and replay protection for RTP
traffic. However, SRTP incurs an additional overhead to verify the
HMAC-SHA1 message authentication code for each packet. SRTP+
significantly decrease the verification overhead compared to SRTP and
thereby increases the number of faked packets required to mount a
successful denial of service attack. SRTP+ provides packet authentication
but not integrity. SRTP+ is compatible with SRTP.