A New Provably Secure Authentication and Key Agreement Mechanism for SIP Using Certificateless Public-Key Cryptography

The session initiation protocol (SIP) is considered as the dominant signaling protocol for calls over the internet. However, SIP authentication typically uses HTTP digest authentication, which is vulnerable to many forms of known attacks. This paper proposes a new secure authentication and key agreement mechanism based on certificateless public-key cryptography, named as SAKA, between two previously unknown parties, which provides stronger security assurances for SIP authentication and media stream, and is provably secure in the CK security model. Due to using certificateless public key cryptography, SAKA effectively avoids the requirement of a large Public Key Infrastructure and conquers the key escrow problem in previous schemes. Key words: SIP, certificateless public-key cryptography, authentication, key agreement

• Type: Conference
• Year: 2007
• Where: CIS
• Authors: Fengjiao Wang, Yuqing Zhang
• Keywords: Certificateless Public-key Cryptography, CIS 2007, Key Agreement, SIP Authentication