Journal
INTERNATIONAL JOURNAL OF COMMUNICATION SYSTEMS
Volume 25, Issue 1, Pages 47-54Publisher
WILEY
DOI: 10.1002/dac.1286
Keywords
authentication protocol; key agreement; session initiation protocol; password guessing attacks; stolen-verifier attacks
Funding
- National Natural Science Foundation of China [61070153]
- Natural Science Foundation of Zhejiang Province [Y1080831]
Ask authors/readers for more resources
The session initiation protocol (SIP) is an authentication protocol used in 3G mobile networks. In 2009, Tsai proposed an authenticated key agreement scheme as an enhancement to SIP. Yoon et al. later pointed out that the scheme of Tsai is vulnerable to off-line password guessing attack, DenningSacco attack, and stolen-verifier attack and does not support perfect forward secrecy (PFS). Yoon et al. further proposed a new scheme with PFS. In this paper, we show that the scheme of Yoon et al. is still vulnerable to stolen-verifier attack and may also suffer from off-line password guessing attack. We then propose several countermeasures for solving these problems. In addition, we propose a new security-enhanced authentication scheme for SIP. Our scheme also maintains low computational complexity. Copyright (C) 2011 John Wiley & Sons, Ltd.
Authors
I am an author on this paper
Click your name to claim this paper and add it to your profile.
Reviews
Recommended
No Data Available