An improved Authentication Protocol for SIP-based VoIP

DOI

10.2991/racs-15.2016.2How to use a DOI?

Keywords

VoIP, SIP, Authentication

Abstract

The SIP being an application layer protocol for signaling has been considered as the most ppropriate one for multimedia applications. In order to detect some collisions and replay attacks, the SIP offers built-in authentication mechanism as per its specification, designated as HTTP digest based authentication, but study reveals that it is vulnerably susceptible to heterogeneous security issues such as impersonation attacks, man-in-the-middle attacks (MITM), server spoofing and password guessing attacks. Very recently Zhang et al. proposed symmetric key based anonymous authentication scheme for SIP. They claimed the scheme to provide privacy and anonymity, but the analysis in this paper expose that Zhang et al.’s scheme does not provide dynamic identity hence it is not anonymous. Furthermore, we proposed an improved anonymous authentication scheme for SIP. The scheme is more secure as compared with Zhang et al.’s scheme.

Copyright

© 2016, the Authors. Published by Atlantis Press.

Open Access

This is an open access article distributed under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).

Download article (PDF)

TY  - CONF
AU  - Husnain Naqvi
AU  - Shehzad Chaudhry,
AU  - Khalid Mahmood,
PY  - 2015/11
DA  - 2015/11
TI  - An improved Authentication Protocol for SIP-based VoIP
BT  - Proceedings of the 2015 International Conference on Recent Advances in Computer Systems
PB  - Atlantis Press
SP  - 7
EP  - 12
SN  - 2352-538X
UR  - https://doi.org/10.2991/racs-15.2016.2
DO  - 10.2991/racs-15.2016.2
ID  - Naqvi2015/11
ER  -