An enhanced password authentication scheme for session initiation protocol with perfect forward secrecy

PLoS One. 2018 Mar 16;13(3):e0194072. doi: 10.1371/journal.pone.0194072. eCollection 2018.

Abstract

The Session Initiation Protocol (SIP) is an extensive and esteemed communication protocol employed to regulate signaling as well as for controlling multimedia communication sessions. Recently, Kumari et al. proposed an improved smart card based authentication scheme for SIP based on Farash's scheme. Farash claimed that his protocol is resistant against various known attacks. But, we observe some accountable flaws in Farash's protocol. We point out that Farash's protocol is prone to key-compromise impersonation attack and is unable to provide pre-verification in the smart card, efficient password change and perfect forward secrecy. To overcome these limitations, in this paper we present an enhanced authentication mechanism based on Kumari et al.'s scheme. We prove that the proposed protocol not only overcomes the issues in Farash's scheme, but it can also resist against all known attacks. We also provide the security analysis of the proposed scheme with the help of widespread AVISPA (Automated Validation of Internet Security Protocols and Applications) software. At last, comparing with the earlier proposals in terms of security and efficiency, we conclude that the proposed protocol is efficient and more secure.

Publication types

  • Research Support, Non-U.S. Gov't

MeSH terms

  • Communication
  • Computer Security*
  • Confidentiality*
  • Health Smart Cards / methods*
  • Information Systems
  • Internet
  • Multimedia
  • Social Responsibility
  • Software

Grants and funding

This research is supported by the National Key Research and Development Plan (Grant No. 2017YFB0801901) to GX and National Key Research and Development Program of China (Grant no. 2017YFB0801900) to GX. The funders had no role in study design, data collection and analysis, decision to publish, or preparation of the manuscript.