A New Authentication Scheme for Session Initiation Protocol

Author

Yoon, Eun-Jun ; Yoo, Kee-Young

Author_Institution

Sch. of Electr. Eng. & Comput. Sci., Kyungpook Nat. Univ., Daegu

fYear

2009

fDate

16-19 March 2009

Firstpage

549

Lastpage

554

Abstract

In 2008, Tsai proposed an efficient nonce-based authentication scheme for Session Initiation Protocol (SIP). The current paper, however,demonstrates that Tsai´s authentication scheme is still vulnerable to off-line password guessing attacks, Denning-Sacco attack and stolen-verifier attacks, and does not provide perfect forward secrecy. We also propose a new secure and efficient authentication scheme based on the elliptic curve discrete logarithm problem (ECDLP) for SIP in order to overcome such security problems.

Keywords

cryptographic protocols; Denning-Sacco attack; authentication scheme; elliptic curve discrete logarithm; offline password guessing attacks; perfect forward secrecy; security problems; session initiation protocol; stolen-verifier attack; Authentication; Competitive intelligence; Computational efficiency; Cryptographic protocols; Elliptic curve cryptography; Elliptic curves; Resists; Security; Software systems; Transport protocols; Cryptanalysis; Cryptography; Network security;

fLanguage

English

Publisher

ieee

Conference_Titel

Complex, Intelligent and Software Intensive Systems, 2009. CISIS '09. International Conference on

Conference_Location

Fukuoka

Print_ISBN

978-1-4244-3569-2

Electronic_ISBN

978-0-7695-3575-3

Type

conf

DOI

10.1109/CISIS.2009.93

Filename

5066839