An improved and efficient mutual authentication scheme for session initiation protocol.

Area of Science:

• Cybersecurity
• Network Protocols
• Information Security

Background:

• Previous authentication schemes by Chaudhry et al. and Kumari et al. were found to have security weaknesses.
• Qiu et al. proposed an advanced authentication scheme for Session Initiation Protocol (SIP) to enhance security, claiming it was secure and practical.

Purpose of the Study:

• To identify and address security flaws in the authentication scheme proposed by Qiu et al.
• To propose an efficient and provably secure mutual authentication scheme for SIP.

Main Methods:

• Analysis of the security vulnerabilities in Qiu et al.'s protocol.
• Development of a new mutual authentication scheme.
• Security analysis using Burrows-Abadi-Needham (BAN) logic.

Main Results:

• The protocol proposed by Qiu et al. contains a serious execution error and is vulnerable to insider and denial-of-service attacks.
• The newly proposed scheme is demonstrated to be executable and withstands identified attacks.
• BAN logic confirms the enhanced security of the proposed scheme.

Conclusions:

• The authentication scheme by Qiu et al. is flawed and insecure.
• The proposed mutual authentication scheme offers superior security and performance compared to Qiu et al.'s protocol.
• The new scheme provides a robust solution for secure SIP communication.