A secure and efficient SIP authentication scheme for converged VoIP networks

Authors:
Eun-Jun Yoon;Kee-Young Yoo;Cheonshik Kim;You-Sik Hong;Minho Jo;Hsiao-Hwa Chen
Affiliations:
School of Electrical Engineering and Computer Science, Kyungpook National University, 1370 Sankyuk-Dong, Buk-Gu, Daegu 702-701, South Korea;School of Electrical Engineering and Computer Science, Kyungpook National University, 1370 Sankyuk-Dong, Buk-Gu, Daegu 702-701, South Korea;Department of Computer Engineering, College of Electronics and Information Engineering, Sejong University, 98 Gunja-Dong, Gwangjin-Gu, Seoul, 143-747, South Korea;Department of Computer Science, SangJi University, 220-702, 660 Usandong, Wonjusi Gangwondo, South Korea;School of Electrical Engineering, Korea University, 5-ka, Anam-dong, Seongbuk-Gu, Seoul 136-701, South Korea;Department of Engineering Science, National Cheng Kung University, 1 Da-Hsueh Road, Tainan City 70101, Taiwan, ROC
Venue:
Computer Communications
Year:
2010

Citing 10
Cited 3

Use of elliptic curves in cryptography

Lecture notes in computer sciences; 218 on Advances in cryptology---CRYPTO 85
Timestamps in key distribution protocols

Communications of the ACM
Handbook of Applied Cryptography

Handbook of Applied Cryptography
Analysis of Key-Exchange Protocols and Their Use for Building Secure Channels

EUROCRYPT '01 Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology
A workload characterization of elliptic curve cryptography methods in embedded environments

MEDEA '03 Proceedings of the 2003 workshop on MEmory performance: DEaling with Applications , systems and architecture
SIP: Understanding the Session Initiation Protocol, Second Edition

SIP: Understanding the Session Initiation Protocol, Second Edition
A new provably secure authentication and key agreement protocol for SIP using ECC

Computer Standards & Interfaces
Robust and simple authentication protocol for secure communication on the web

ICWE'05 Proceedings of the 5th international conference on Web Engineering
New directions in cryptography

IEEE Transactions on Information Theory
SIP security issues: the SIP authentication procedure and its processing load

IEEE Network: The Magazine of Global Internetworking

Cryptanalysis of a SIP authentication scheme

CMS'11 Proceedings of the 12th IFIP TC 6/TC 11 international conference on Communications and multimedia security
A secure mutual authentication scheme for session initiation protocol using elliptic curve cryptography

Security and Communication Networks
Robust smart card secured authentication scheme on SIP using Elliptic Curve Cryptography

Computer Standards & Interfaces

Quantified Score

Hi-index	0.24

Visualization

Abstract

Session Initiation Protocol (SIP) has been widely used in current Internet protocols such as Hyper Text Transport Protocol (HTTP) and Simple Mail Transport Protocol (SMTP). SIP is a powerful signaling protocol that controls communications on the Internet for establishing, maintaining and terminating sessions. The services that are enabled by SIP are equally applicable to mobile and ubiquitous computing. This paper demonstrates that recently proposed SIP authentication schemes are insecure against attacks such as off-line password guessing attacks, Denning-Sacco attacks and stolen-verifier attacks. In order to overcome such security problems, a new secure and efficient SIP authentication scheme in a converged VoIP network based on elliptic curve cryptography (ECC) is proposed and it works to exploit the key block size, speed, and security jointly.