Design of a password-based authenticated key exchange protocol for SIP

Abstract

The Session Initiation Protocol (SIP) is a signaling communications protocol, which has been chosen for controlling multimedia communication in 3G mobile networks. In recent years, password-based authenticated key exchange protocols are designed to provide strong authentication for SIP. In this paper, we address this problem in two-party setting where the user and server try to authenticate each other, and establish a session key using a shared password. We aim to propose a secure and anonymous authenticated key exchange protocol, which can achieve security and privacy goal without increasing computation and communication overhead. Through the analysis, we show that the proposed protocol is secure, and has computational and computational overheads comparable to related authentication protocols for SIP using elliptic curve cryptography. The proposed protocol is also provably secure in the random oracle model.

Provably secure three‐factor authentication and key agreement scheme for session initiation protocol

“…Table summarizes the communication overheads needed by the proposed scheme and other related existing ECC‐based schemes. It is also clear that the proposed scheme also needs the minimum communication cost as compared with all other existing schemes except the scheme of Mishra , which has the same cost as our scheme.…”

“…Table summarizes the computation overheads required by the proposed scheme and other related ECC‐based schemes, such as the schemes of Zhang et al , Tu et al , Farash , Yeh et al , Jiang et al , and Mishra . In our scheme, the user U i and the server S need the computation overhead of 3 T h + 3 T e c m (≈6.6849ms) and 4 T h + 3 T e c m (≈6.6872ms), respectively, and the total cost becomes 7 T h + 6 T e c m (≈13.3721ms).…”

“…We briefly review the very recently proposed Mishra's scheme and then show that it is vulnerable to various known attacks. The notations listed in Table are used throughout the paper.…”

“…In this paper, we first analyze the security of the recently proposed Mishra's scheme for SIP and then show that it is vulnerable to several known attacks. To erase those security weaknesses in Mishra's scheme , we aim to present a provably secure three‐factor authentication and key agreement scheme for SIP.…”

“…Section 2 discusses the necessary mathematical definitions and preliminaries. Section 3 deals with the review and cryptanalysis of Mishra's scheme . Sections 4 and 5 detail the proposed scheme and its rigorous security analysis, respectively.…”