Research on authentication protocol security for SIP networks based on BAN logic

The formalized analysis and deduction of the HTTP digest authentication protocol used in session initiation protocol (SIP) networks were conducted by using the BAN logic. The limitations in the HTTP digest authentication protocol and the impersonation attacks caused by the limitations were verified through the strict logic ratiocination. Based on the result of the logic ratiocination and the analysis of the ratiocination process, the message identity validating rule and the message novelty transfer rule were added to the BAN logic, and the ability for logic deduction of the BAN logic was improved. The measures of digital signature, public and private key, two-way authentication, and key negotiation were added to the HTTP Digest authentication protocol, and the security of the protocol was enhanced.