International Journal of Communication Systems · 2013 · 90 citations · 16 references
EngineeringInformation SecurityMulti-factor AuthenticationAuthorizationSession Initiation ProtocolFlexible PasswordSecurity ProtocolsSecure ProtocolAuthentication ProtocolLightweight Authentication MechanismIdentity-based SecurityAuthenticationNetworked Computer SystemsKey Agreement ProtocolCybersecurity ProtocolsData SecurityCryptographyKey AgreementSmart CardInternet ProtocolAuthentication Access Control
A suitable key agreement protocol for SIP is essential to secure user communication over open channels. The paper proposes an efficient, flexible password‑authenticated key agreement protocol for SIP in VoIP. The protocol achieves session key agreement, mutual authentication, password updates, and eliminates the need for server‑side password tables. It resists replay, impersonation, stolen‑verifier, man‑in‑the‑middle, Denning–Sacco, and offline dictionary attacks, with or without a smart card. © 2013 John Wiley & Sons, Ltd.
SUMMARY Providing a suitable key agreement protocol for session initiation protocol is crucial to protecting the communication among the users over the open channel. This paper presents an efficient and flexible password authenticated key agreement protocol for session initiation protocol associated with Voice over Internet Protocol. The proposed protocol has many unique properties, such as session key agreement, mutual authentication, password updating function and the server not needing to maintain a password or verification table, and so on. In addition, our protocol is secure against the replay attack, the impersonation attack, the stolen‐verifier attack, the man‐in‐the‐middle attack, the Denning–Sacco attack, and the offline dictionary attack with or without the smart card. Copyright © 2013 John Wiley & Sons, Ltd.
16