An improved authenticated key agreement with anonymity for session initiation protocol. (2017)

• Record Type: Journal Article
• Authors: Chen, Haoran; Chen, Jianhua; Shen, Han
• Is Part Of: International journal of electronic security and digital forensics. Volume 9:Number 2(2017)
• Page Start: 132
• Page End: 149
• Publication Date: 2017
• Subjects: mutual authentication -- session initiation protocol -- SIP -- elliptic curve -- key agreement -- communication security; Computer crimes -- Periodicals; Computer crimes -- Investigation -- Periodicals; Computer security -- Periodicals; Electronic commerce -- Law and legislation -- Periodicals; Information warfare -- Periodicals; 005.805
• Languages: English
• ISSNs: 1751-911X

Abstract

As a lightweight and flexible signalling protocol, session initiation protocol (SIP) has been widely used for establishing, modifying and terminating the sessions in the multimedia environment. The increasing concerns about the security of communication sessions that run over the public Internet has made authentication protocols for SIP more desired. Recently, Lu et al. proposed an authentication scheme for SIP and claimed that their scheme is secure against various known attacks while maintaining efficiency. However, in this paper we will indicate that their protocol suffers from server spoofing attacks and failed to provide mutual authentication as they claimed. Further, we have presented an improved authentication protocol for SIP and proved its security using BAN logic. Though the security and performance analysis, we illustrate that the proposed scheme is more secure and flexible.