We present a survey of authentication and key agreement schemes that are proposed for the SIP protocol. SIP has become the center piece for most VoIP architectures. Performance and security of the authentication and key agreement schemes are two critical factors that affect the VoIP applications with large number of users. Therefore, we have identified, categorized and evaluated various SIP authentication and key agreement protocols according to their performance and security features. Although the performance is inversely proportional to the security features provided in general, we observed that there are successful schemes from both the performance and security viewpoint.

A Survey of SIP Authentication and Key Agreement Schemes

The communication environment of present IP networks offers wide options of multimedia real-time communication (RTC) possibilities. RTC is a type of communication service provided over IP, which introduced its specific security threats and security related problems that may disturb a RTC communication environment. RTC communication consists of two parts — signalization and multimedia data transfer. Within the signalization part, the SIP (Session Initialization Protocol) protocol became dominant. In the data transfer part, there is the RTP (Real-time Transport Protocol) protocol. From the security point of view, on one side both of these protocols use several built-in security mechanisms. On the other side, there exists a whole autonomous infrastructure specially built for the provisioning and support of secure communication. The infrastructure is known as the Public Key Infrastructure (PKI). The article focuses on the present state analysis of use and cooperation of RTC and PKI in order to provide forms of better and more complex RTC security.

Securing SIP infrastructures with PKI — The analysis

Nowadays, Effectiveness and benefits of mobile phone technologies appeared more than expected. During the recent decade, using of mobile phone improved from telephone call tools to a remote control, transfer messages and financial transactions tools. One of the most important challenges in the mservices area is the security issue. Different papers have discussed various aspects of secured networks. But, until now a extensive ranking approach has not been presented to overcome the security issues. In this paper, first the security technologies and their applications have reviewed. Then the future trends of mobile technology in the world and current condition of mobile users in Iran have investigated. The result of literature reviews showed 13 security technologies and 6 groups of applications. In the next step, with designing a questionnaire for collecting and analyzing the opinion of experts, the importance of different security technologies within six types of mobile service have scrutinized.

Safety technologies impacts survey in M-services security provision

In the beginning, this paper describes basic overview of attacks on TCP/IP stack in general. In the next section, there is overview of security of signalization and description of techniques used to secure signalization in multimedia communication. Then, there are described techniques of multimedia security. The last part of the paper deals with a Public key infrastructure (PKI) and aspects of its deployment. This paper is focused on real-time communication based on SIP signalization protocol.

Survey of real-time multimedia security mechanisms

We develop architecture of a virtual aggregation gateway (VAG) which enables composite application streaming based on N-Screen-as-a-Service (NaaS) using cloud computing in thin-client environment. We also discuss the problem of server computing burden in large scale multi-client case for screens sharing with composite application streaming over the internet. In particular, we propose an efficient Framework of N-Screen Session Manager which manages all media signaling that are necessary to deliver demanded contents. Furthermore, it will provides user with playback multimedia contents method (TV Drama, Ads, and Dialog etc) which is not considered in other research papers. The objectives of proposing N-Screen Session Manager are to (1) manage session status of all communication sessions (2) manage handling of received request and replies (3) allow users to playback multimedia contents anytime with variety of devices for screen sharing and (4) allow users to transfer an ongoing communication session from one device to another. Furthermore, we discuss the major security issues that occur in Session Initiation Protocol as well as minimizing delay resulted from session initiations (playback or transfer session).

/pdf/a-framework-of-n-screen-session-manager-based-n-screen-4asvxmnhvs.pdf

A Framework of N-Screen Session Manager based N-Screen Service using Cloud Computing in Thin-Client Environment

The Session Initiation Protocol (SIP) has become the most predominant protocol for Voice over Internet Protocol (VoIP) signaling. Security of SIP is an important consideration for VoIP communication as the traffic is transmitted over the insecure IP network. And the authentication process in SIP ranges from preshared secret based solutions to Public Key Infrastructure (PKI) based solution. However, due to the limitations in PKI based solutions, some PKI less authentications mechanisms are proposed. This paper aims to present an overview of different authentication methods used in or together with SIP. We start by highlighting the security issues in SIP in the context of VoIP communication. Then we illustrate the current activities regarding the SIP authentication mechanisms including the recent developments in the research community and standardization efforts within the Internet Engineering Task Force (IETF). Finally we analyze the security aspects of these approaches.

/pdf/towards-public-key-infrastructure-less-authentication-in-5f5dqcimri.pdf

Muhammad Sarwar Jahan Morshed

Papers

Towards Public Key Infrastructure less authentication in Session Initiation Protocol