Abstract—Session Initial Protocol (SIP) has received much attention and increasingly used for administrating Voice over IP (VoIP) phone calls and in current Internet protocols such as Hyper Text Transport Protocol (HTTP) and Simple Mail Transport Protocol (SMTP) as a signaling protocol. SIP is a based on HTTP to establish multimedia sessions in both wire line and wireless world. But the authentication mechanism proposed in SIP is based on HTTP Digest authentication that this scheme vulnerable against some attacks, such as off-line password guessing attacks, replay attacks, impersonate attacks and etc. So, many researches proposed various schemes to secure the SIP authentication. In the year 2012, Tang et al. proposed a SIP authentication using elliptic curve cryptography (ECC), but their scheme is insecure against off-line password guessing and DoS attacks. We proposed an ECC-based authentication scheme for SIP to overcome such security problems and analysis of security of the ECC-based protocol indicates that our scheme is appropriate for the applications with higher security requirement.

Index Terms—SIP, elliptic curve cryptography, authentication, vulnerability, security, mutual.

Samaneh Sadat Mousavi Nik is with Payam Noor University, Mashhad. She was with the Department of Engineering , Security in Information Technology, University of Tehran Kish International Campus, Iran (Corresponding Author, e-mail: samaneh_mousavi@alumni.ut.ac.ir)
Mehdi Shahrabi is with the Department of Engineering, Amirkabir University of Technology- Tehran Polytechnic (e-mail: mshahrabi@aut.ac.ir )

 

Cite:Samaneh Sadat Mousavi Nik and Mehdi Shahrabi, "Mutual SIP Authentication Scheme Based on ECC," International Journal of Computer and Electrical Engineering vol. 6, no.2, pp. 196-200, 2014.