- 期刊
A New Secure Authentication and Key Exchange Protocol for Session Initiation Protocol Using Smart Card
摘要
In today0s communications over Internet Protocol (IP), Session Initiation Protocol (SIP) is using establish, modify and terminate the sessions multimedia among participants. Authentication is the most security service required for SIP. Authentication HTTP Digest is the original authentication protocol proposed for SIP. However, this protocol is demonstrated insecure against different at- tacks. To improve the authentication, a different authentication protocols have being proposed. Very recently, Jiang et al. demonstrate that Zhang et al.'s scheme can- not resist to impersonation attack. Then, Jiang et al. proposed their protocol. However, in this paper we show that Jiang et al.'s protocol suffer from server spoofing at- tack. In order to overcome this problem we propose an improved SIP authentication protocol. The security analysis shows that the proposed protocol is more secure and can deal with several attacks.
延伸閱讀
- Sood, S. K. (2012). An Improved and Secure Smart Card Based Dynamic Identity Authentication Protocol. International Journal of Network Security, 14(1), 39-46. https://doi.org/10.6633/IJNS.201201.14(1).05
- Li, C. T., Lee, C. C., Weng, C. Y., & Fan, C. I. (2015). A Secure Dynamic Identity Based Authentication Protocol with Smart Cards for Multi-Server Architecture. Journal of Information Science and Engineering, 31(6), 1975-1992. https://doi.org/10.6688/JISE.2015.31.6.9
- Chang, C. C., Wu, H. L., Wang, Z. H., & Mao, Q. (2013). An Efficient Smart Card Based Authentication Scheme Using Image Encryption. Journal of Information Science and Engineering, 29(6), 1135-1150. https://doi.org/10.6688/JISE.2013.29.6.5
- Kumar, M. (2010). An Enhanced Remote User Authentication Scheme with Smart Card. International Journal of Network Security, 10(3), 175-184. https://doi.org/10.6633/IJNS.201005.10(3).02
- Wang, B., & Li, Z. Q. (2006). A Forward-Secure User Authentication Scheme with Smart Cards. International Journal of Network Security, 3(2), 116-119. https://doi.org/10.6633/IJNS.200609.3(2).02