PLoS ONE · 2019 · 23 citations · 22 references
ComputingComputer EngineeringComputer ScienceAuthenticationComputer SecurityCryptographyAuthentication ProtocolsAuthentication SecurityKey Exchange ProtocolsMutual AuthenticationProtocol AnalysisSession AuthenticationAuthentication Security AnalysisDenial Of ServiceDenial Of Service Attack MitigationMutual Authentication ProtocolsSecure AuthenticationSecure Authentication ProtocolsSecure Session InitiationSession Initiation Protocol
Qiu et al. made a security analysis about the protocols of Chaudhry et al. and Kumari et al. in 2018, and they pointed out that there are many security weaknesses in the protocols. To improve the security, Qiu et al. proposed an advanced authentication scheme for Session Initiation Protocol on the basis of the previous protocols and claimed that their own protocol was very secure and practical. However, we demonstrate that the protocol of Qiu et al. has a serious mistake which causes their protocol cannot be executed normally. Beyond that, we also find out that their protocol cannot withstand insider attack and denial service attack. In order to remove these weaknesses, we propose an efficient provably secure mutual authentication scheme. Furthermore, our scheme provides security analysis with the help of Burrows-Abadi-Needham (BAN) logic. Compared with their protocol, ours has greater security and better performance.
22