We propose an efficient identity based mutual authentication scheme for GSM. In the proposed scheme, mobile station (MS) and visitor location register (VLR) authenticate each other and establish a session key to communicate securely for every communication. Our scheme requires less bandwidth and storage. The scheme does not involve certificate management and is resilient to replay and man-in-the middle attacks. We also compare the performance of our scheme with that of the existing schemes.