A new authenticated key agreement for session initiation protocol

  • Qi Xie
    School of Information Science and Engineering Hangzhou Normal University Hangzhou 310036 China

説明

<jats:title>SUMMARY</jats:title><jats:p>The session initiation protocol (SIP) is an authentication protocol used in 3G mobile networks. In 2009, Tsai proposed an authenticated key agreement scheme as an enhancement to SIP. Yoon <jats:italic>et al.</jats:italic> later pointed out that the scheme of Tsai is vulnerable to off‐line password guessing attack, Denning–Sacco attack, and stolen‐verifier attack and does not support perfect forward secrecy (PFS). Yoon <jats:italic>et al</jats:italic>. further proposed a new scheme with PFS. In this paper, we show that the scheme of Yoon <jats:italic>et al.</jats:italic> is still vulnerable to stolen‐verifier attack and may also suffer from off‐line password guessing attack. We then propose several countermeasures for solving these problems. In addition, we propose a new security‐enhanced authentication scheme for SIP. Our scheme also maintains low computational complexity. Copyright © 2011 John Wiley & Sons, Ltd.</jats:p>

収録刊行物

被引用文献 (1)*注記

もっと見る

詳細情報 詳細情報について

問題の指摘

ページトップへ