Performance analysis of identity management in the Session Initiation Protocol (SIP)

Authors:
Yacine Rebahi;Jordi Jaen Pallares; Nguyen Tuan Minh;Sven Ehlert;Gergely Kovacs;Dorgham Sisalem
Affiliations:
Fraunhofer Institut Fokus, Kaiserin Augusta Allee 31, 10589, Berlin, Germany;Fraunhofer Institut Fokus, Kaiserin Augusta Allee 31, 10589, Berlin, Germany;Fraunhofer Institut Fokus, Kaiserin Augusta Allee 31, 10589, Berlin, Germany;Fraunhofer Institut Fokus, Kaiserin Augusta Allee 31, 10589, Berlin, Germany;Tekelec, Berlin, Germany;Tekelec, Berlin, Germany
Venue:
AICCSA '08 Proceedings of the 2008 IEEE/ACS International Conference on Computer Systems and Applications
Year:
2008

Citing 0
Cited 5

A Survey of Voice over IP Security Research

ICISS '09 Proceedings of the 5th International Conference on Information Systems Security
SIP proxies: new reflectors in the internet

CMS'10 Proceedings of the 11th IFIP TC 6/TC 11 international conference on Communications and Multimedia Security
Analysis of token and ticket based mechanisms for current VoIP security issues and enhancement proposal

CMS'10 Proceedings of the 11th IFIP TC 6/TC 11 international conference on Communications and Multimedia Security
Side effects of identity management in SIP VoIP environment

Information Security Tech. Report
SPIDER: A platform for managing SIP-based Spam over Internet Telephony SPIT

Journal of Computer Security

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Session Initiation Protocol (SIP) is a standard for managing IP multimedia sessions in the Internet. Identity management in SIP is a crucial security field that deals with identifying users in SIP networks and controlling their access to the corresponding resources. RFC 4474 describes a mechanism, based on certificates, for dealing with the SIP users identities. This RFC recommends the use of the RSA algorithm as it is currently the most popular public key cryptography system. The proliferation of small and simple devices as well as the need to increase the capacity of the SIP servers to handle the increasing VoIP traffic will make continued reliance on RSA more challenging over time. In this paper, we describe our implementation of the current RFC 4474, our integration of elliptic curves cryptography into this RFC and show that the corresponding performance is much more significant than the one where RSA is used. This paper can be considered as a first step in standardizing the use of elliptic curves in the identity management for SIP.