基于ECC的SIP身份认证密钥协商协议

A SIP Identity Authentication Key Agreement Protocol Based on ECC

为在SIP认证协议中实现用户匿名性并提高协议的安全性能,将挑战/应答机制、椭圆曲线密码技术和口令认证相结合,提出一种新的匿名SIP认证协议。协议仅使用少量的椭圆曲线点乘运算,既保障认证的安全性又有效降低了整体运算量。协议在认证过程中引入高熵随机数,认证双方使用挑战/应答机制的三次握手实现双向认证,同时协商生成后续会话所需密钥。通过对协议的BAN逻辑分析和多种已知攻击的非形式化分析,证明该协议具有较高的安全性能。经与相关协议的效率比较,协议认证过程所需的运算量更小。

In order to provide user anonymity in SIP(session initialization protocol)authentication protocol and improve the security performance of the protocol,a new anonymous SIP authentication protocol is proposed by combining challenge/response mechanism,elliptic curve cryptography and password authentication.The protocol only uses few point multiplication operations of elliptic curve cryptography,which not only ensures the security of authentication,but also effectively reduces the overall amount of computation.The protocol introduces high-entropy random number in the authentication process.The authentication parties use three handshakes of challenge/response mechanism to realize two-way authentication,and generate the key required for subsequent sessions at the same time.Through the BAN(Burrows,Abadi and Needham)logic analysis of the protocol and the informal analysis aim at many known attacks,it is proved that the protocol has high security performance.Compared with the efficiency of related protocols,the protocol authentication process requires less computation.