Mutual SIP Authentication Scheme Based on ECC
Samaneh Sadat Mousavi Nik, Mehdi Shahrabi · International Journal of Computer and Electrical Engineering · 2014
Abstract—Session Initial Protocol (SIP) has received much attention and increasingly used for administrating Voice over IP (VoIP) phone calls and in current Internet protocols such as Hyper Text Transport Protocol (HTTP) and Simple Mail Transport Protocol (SMTP) as a signaling protocol. SIP is a based on HTTP to establish multimedia sessions in both wire line and wireless world. But the authentication mechanism proposed in SIP is based on HTTP Digest authentication that this scheme vulnerable against some attacks, such as off-line password guessing attacks, replay attacks, impersonate attacks and etc. So, many researches proposed various schemes to secure the SIP authentication. In the year 2012, Tang et al. proposed a SIP authentication using elliptic curve cryptography (ECC), but their scheme is insecure against off-line password guessing and DoS attacks. We proposed an ECC-based authentication scheme for SIP to overcome such security problems and analysis of security of the ECC-based protocol indicates that our scheme is appropriate for the applications with higher security requirement.