SIP seclite: SIP security solution all in one

Session Initiation Protocol (SIP) is an application-layer signaling and control protocol for creating, modifying and terminating sessions including Internet telephone calls, multimedia distribution and multimedia conferences. Flexible, extensible and open, SIP has a complete security mechanism that allows security of both media and signaling. SIP security has the notion of providing confidentiality, integrity, anonymity, and peer authentication to the signalling data flowing through the intermediaries. Many techniques exist to provide these properties, but no one can provide all of them simultaneously. In this paper we propose a new authentication scheme called SIP SecLite based on the manipulation and the encryption of some header fields in SIP messages in order to perform peer authentication and end to end security while ensuring non-repudiation, confidentiality and integrity of SIP messages and privacy of end users.