A Secure Lightweight Mutual Authentication Scheme for VoIP based on Smart Card

With the widespread use of Voice over IP (VoIP) technology to transmit multimedia such as voice and video, Session Initiation Protocol (SIP) has been the focus of many research. To establish a secure communication channel between the two parties using SIP, authentication of the parties is of the utmost importance. Many research has been done on authentication protocols in recent years, including the lightweight VoIP authentication scheme presented by Zhang et al. In this article, we first prove that Zhang's authentication scheme is not robust against known-session-specific temporary information attack and does not meet the security requirement of perfect forward secrecy. In addition, we present a lightweight and efficient authentication protocol and show that the proposed protocol is resistant to various attacks and is capable of meeting essential security requirements such as perfect forward secrecy and user anonymity. We have also examined the performance of the proposed protocol in terms of computational complexity and have shown that the proposed method has less computational complexity compared to most similar methods. Finally, we prove the correctness of the proposed protocol with Scyther and Proverif tools.