A new provably secure authentication and key agreement mechanism for SIP using certificateless public-key cryptography

Authors:
Fengjiao Wang;Yuqing Zhang
Affiliations:
National Computer Network Intrusion Protection Center, GSCAS, Beijing 100049, China;National Computer Network Intrusion Protection Center, GSCAS, Beijing 100049, China
Venue:
Computer Communications
Year:
2008

Citing 3
Cited 9

Entity authentication and key distribution

CRYPTO '93 Proceedings of the 13th annual international cryptology conference on Advances in cryptology
Modern Cryptography: Theory and Practice

Modern Cryptography: Theory and Practice
SIP security issues: the SIP authentication procedure and its processing load

IEEE Network: The Magazine of Global Internetworking

Certificateless Threshold Ring Signature

Information Sciences: an International Journal
Simulatable certificateless two-party authenticated key agreement protocol

Information Sciences: an International Journal
Proxychain: developing a robust and efficient authentication infrastructure for carrier-scale VoIP networks

USENIXATC'10 Proceedings of the 2010 USENIX conference on USENIX annual technical conference
A secure and lightweight scheme for media keying in the session initiation protocol (SIP): work in progress

Principles, Systems and Applications of IP Telecommunications
Toward pairing-free certificateless authenticated key exchanges

ISC'11 Proceedings of the 14th international conference on Information security
A new secure password authenticated key agreement scheme for SIP using self-certified public keys on elliptic curves

Computer Communications
A pairing-free certificateless authenticated key agreement protocol

International Journal of Communication Systems
A new authenticated key agreement for session initiation protocol

International Journal of Communication Systems
Robust smart card secured authentication scheme on SIP using Elliptic Curve Cryptography

Computer Standards & Interfaces

Quantified Score

Hi-index	0.24

Visualization

Abstract

The session initiation protocol (SIP) is considered as the dominant signaling protocol for calls over the Internet. However, SIP authentication typically uses HTTP digest authentication, which is vulnerable to many forms of known attacks. This paper proposes a new secure authentication and key agreement mechanism based on certificateless public-key cryptography (CL-PKC), named as SAKA, between two previously unknown parties, which provides stronger security assurances for SIP authentication and media stream, and is provably secure in the CK security model. Due to using CL-PKC, SAKA effectively avoids the requirement of a large Public Key Infrastructure and conquers the key escrow problem in previous schemes.