Voice Interactive Personalized Security Protocol: Definition and Security Analysis

Security is a major issue in VoIP communications over the Internet, especially in mobile environments. Voice Interactive Personalized Security (VIPSec) constitutes a method for leveraging the security for Internet communications, with biometric based authentication, exploiting the nature of the application. During the establishment of the communication session, the end-peers exchange a challenge/signature token, the integrity of which is confirmed vocally when the voice communication initiates. In the present work we define the protocol message set in detail and we present an extensive security analysis over the protocol operation. The method is appropriate for ensuring the security of a VoIP or collaboration application, guaranteeing the integrity of the session key exchanged in the beginning of the conversation. It requires minimal resources from the user handsets and no additional support from the network, so it is inherently scalable and readily deployable as it only needs an appropriately enhanced secure handset.