Cryptanalysis of smart-card-based password authenticated key agreement protocol for session initiation protocol of Zhang et al.

International Journal of Communication Systems

Volumn 28, Issue 7, 2015, Pages 1340-1351

  Jiang, Qi ^a   Ma, Jianfeng ^a   Tian, Youliang ^b  

^a XIDIAN UNIVERSITY   (China)

^b GUIZHOU UNIVERSITY   (China)

Author keywords

authentication; key agreement; malicious insider impersonation attack; password; session initiation protocol; smart card

Indexed keywords

HARDWARE SECURITY; INTERNET PROTOCOLS; MULTIMEDIA SERVICES; NETWORK SECURITY; PUBLIC KEY CRYPTOGRAPHY; SMART CARDS; VOICE/DATA COMMUNICATION SYSTEMS;

IMPERSONATION ATTACK; KEY AGREEMENT; PASSWORD; PASSWORD-AUTHENTICATED KEY AGREEMENT; SESSION INITIATION PROTOCOL; SESSION INITIATION PROTOCOLS; USER AUTHENTICATION PROTOCOLS; VOICE OVER INTERNET PROTOCOL;

AUTHENTICATION;

EID: 84925354738     PISSN: 10745351     EISSN: 10991131     Source Type: Journal    
DOI: 10.1002/dac.2767     Document Type: Article

References (27)

1. Rosenberg J, Schulzrinne H, Camarillo G, Johnston A, Peterson J, Sparks R, Handley M, Schooler E,. SIP: session initiation protocol. RFC 3261, June 2002.
2. Shen C, Nahum E, Schulzrinne H, Wright P,. The impact of TLS on sip server performance: measurement and modeling [J]. IEEE/ACM Transactions on Networking 2012; 20 (4): 1217-1230.
3. Keromytis AD,. A comprehensive survey of voice over IP security research[J]. IEEE Communications Surveys & Tutorials 2012; 14 (2): 514-537.
4. Franks J, Hallam-Baker PM, Hostetler JL, Lawrence SD, Leach PJ, Luotonen A, Stewart LC,. HTTP authentication: basic and digest access authentication. Internet RFC2617, June 1999.
5. Kilinc H,., Yanik T,. A survey of SIP authentication and key agreement schemes. IEEE Communications Surveys & Tutorials 2013; DOI: 10.1109/SURV.2013.091513.00050.
6. Yang C, Wang R, Liu W,. Secure authentication scheme for session initiation protocol. Computers& security 2005; 24: 381-386.
7. Wu L, Zhang Y, Wang F,. A new provably secure authentication and key agreement protocol for SIP using ECC. Computer Standards & Interfaces 2009; 31: 286-291.
8. Yoon EJ, Yoo KY, Kim KY, Hong C, Jo YS, Chen HH,. A secure and efficient SIP authentication scheme for converged VoIP networks. Computer Communications 2010; 33: 1674-1681.
9. Tsai JL,. Efficient nonce-based authentication scheme for session initiation protocol. International Journal of Network Security 2009; 9: 12-16.
10. Yoon E, Shin Y, Jeon I, Yoo K,. Robust mutual authentication with a key agreement scheme for the session initiation protocol. IETE Technical Review 2010b; 27: 203-213.
11. Xie Q,. A new authenticated key agreement for session initiation protocol. International Journal of Communication Systems 2012; 25: 47-54.
12. Arshad R, Ikram N,. Elliptic curve cryptography based mutual authentication scheme for session initation protocol. Multimedia Tools and Applications 2011; DOI: 10.1007/s11042-011-0787-0.
13. He D, Chen J, Chen Y,. A secure mutual authentication scheme for session initiation protocol using elliptic curve cryptography. Security and Communication Networks 2012; DOI: 10.1002/sec.506.
14. Tang H, Liu X,. Cryptanalysis of Arshad et al.'s ECC-based mutual authentication scheme for session initiation protocol. Multimedia Tools and Applications 2013; 65 (3): 321-333.
15. Irshad A, Sher M, Faisal S, Ghani A, Ul Hassan M, Ashraf S,. A secure authentication scheme for session initiation protocol by using ECC on the basis of Tang and Liu scheme. Security and Communication Networks 2013; DOI: 10.1002/sec.834.
16. Wu S, Pu Q, Kang F,. Practical authentication scheme for SIP. Peer-to-Peer Networking and Applications 2013; 6 (1): 61-74.
17. Zhang L, Tang S, Cai Z,. Efficient and flexible password authenticated key agreement for voice over internet protocol session initiation protocol using smart card. International Journal of Communication Systems 2013; DOI: 10.1002/dac.2499.
18. Jiang Q, Ma J, Li G, Li X,. Improvement of robust smart-card-based password authentication scheme. International Journal of Communication Systems 2013; Doi: 10.1002/dac.2644.
19. Chen CL, Lee CC, Hsu CY,. Mobile device integration of a fingerprint biometric remote authentication scheme. International Journal of Communication Systems 2012; 25 (5): 585-597.
20. Yeh KH, Lo NW, Li Y,. Cryptanalysis of Hsiang-Shih's authentication scheme for multi-server architecture. IJCS: International Journal of Communication Systems 2011; 24 (7): 829-836.
21. Chen BL, Kuo WC, Wuu LC,. Robust smart-card-based remote user password authentication scheme. International Journal of Communication Systems 2012; DOI: 10.1002/dac.1168.
22. Ma C, Wang D, Zhao S-D,. Security flaws in two improved remote user authentication schemes using smart cards. International Journal of Communication Systems 2012; DOI: 10.1002/dac.2468.
23. Jiang Q, Ma J, Li G, Yang L,. An enhanced authentication scheme with anonymity for roaming service in global mobility networks. Wireless Personal Communications 2013; 68 (4): 1477-1491.
24. Song R,. Advanced smart card based password authentication protocol. Computer Standards & Interfaces 2010; 32 (5): 321-325.
25. He D, Wu S,. Security flaws in a smart card based authentication scheme for multi-server environment. Wireless Personal Communications 2013; 70 (1): 323-329.
26. Kocher P, Jaffe J, Jun B,. Differential power analysis. advances in cryptology. CRYPTO'99 1999; 1666: 788-797.
27. Messerges TS, Dabbish EA, Sloan RH,. Examining smart card security under the threat of power analysis attacks. IEEE Transactions on Computers 2002; 51 (5): 541-552.