期刊
INTERNATIONAL JOURNAL OF COMMUNICATION SYSTEMS
卷 25, 期 1, 页码 47-54出版社
WILEY
DOI: 10.1002/dac.1286
关键词
authentication protocol; key agreement; session initiation protocol; password guessing attacks; stolen-verifier attacks
资金
- National Natural Science Foundation of China [61070153]
- Natural Science Foundation of Zhejiang Province [Y1080831]
The session initiation protocol (SIP) is an authentication protocol used in 3G mobile networks. In 2009, Tsai proposed an authenticated key agreement scheme as an enhancement to SIP. Yoon et al. later pointed out that the scheme of Tsai is vulnerable to off-line password guessing attack, DenningSacco attack, and stolen-verifier attack and does not support perfect forward secrecy (PFS). Yoon et al. further proposed a new scheme with PFS. In this paper, we show that the scheme of Yoon et al. is still vulnerable to stolen-verifier attack and may also suffer from off-line password guessing attack. We then propose several countermeasures for solving these problems. In addition, we propose a new security-enhanced authentication scheme for SIP. Our scheme also maintains low computational complexity. Copyright (C) 2011 John Wiley & Sons, Ltd.
作者
我是这篇论文的作者
点击您的名字以认领此论文并将其添加到您的个人资料中。
推荐
暂无数据