An Advanced Elliptic Curve Cryptography based Mutual Authentication Scheme for Session Initiation Protocol

Session Initiation Protocol (SIP) as the controlling protocol has attracted much attention. SIP is one of the most widely used for securing and controlling communication over the Internet. Recently, Arshad and Ikram proposed an enhanced mutual authentication scheme for SIP based on Tasi's scheme. In this paper, we focus on the security weaknesses in the Arshad and Ikram's SIP authenticated scheme with Elliptic Curve Cryptography(ECC). We found that the enhanced scheme proposed by Arshad and Ikram was insecure against internal and masquerade attacks while not providing anonymity and update password phase. We then propose an advanced scheme to remedy the flaws and maintain benefits of the original scheme at the cost of increasing the computation consumptions slightly. Through a carefully security analysis and Burrows-Abadi-Needham (BAN) logic analysis of our scheme, we show that our scheme is more secure than other related schemes.