AUTHENTICATION METHOD FOR PROTECTING PASSWAORD GUESSING ATTACK IN SESSION INITIATION PROTOCOL USER AUTHENTICATION

摘要

PURPOSE: An authentication method for protecting a password guessing attack in session initiation protocol user authentication are provided to prevent attack from the outside by changing a sub key in connection to new session. CONSTITUTION: A user agent client(200) generates a first distribution key. The user agent client transmits a session request message including the first distribution key with a agent server(S21). A user agent server generates a second distribution key. The user agent server transmits an authentication request message including the second distribution key(S22). The user agent client and user agent server calculate the sub key(S23,S24). The user agent client and user agent server share a common sub key.