Inter-domain Authentication and Authorization Mechanisms for Roaming SIP Users1

Abstract: To enable users to utilize the services of various providers of multimedia services based on the session initiation protocol (SIP), some kind of interaction is required between the foreign provider and the home provider of the users. Such interaction is required for example to allow a user to utilize services provided by a foreign service provider while the user is on travel. In this paper we describe two possible approaches for exchanging authentication, authorization and accounting (AAA) information between foreign and home providers, namely: SIP dependent and independent inter-domain AAA communication. In the SIP dependent scenario, SIP is used as the communication protocol between the interacting providers and for carrying any information that needs to be exchanged between the providers. With the SIP independent scenario a special AAA protocol is used between the domains for exchanging AAA related information. Both approaches will be described in terms of message sequences that would be exchanged and will be analyzed in terms of their efficiency, flexibility and security. The here described scenarios present an overview of various efforts currently being followed in the standardization groups and are based on standardized protocols. Our contribution is to provide the details of the currently discussed concepts and compare between them. 1 This paper describes work undertaken in the context of the IST- FP6/2002/IST/1 ‘My personal Adaptive Global Net ’ IST-MAGNET project, WP3 Adaptive and Scalable Air-Interfaces for Personal Area Networks. The IST program is partially funded by the EC. The authors would like to acknowledge the contributions of their colleagues from the MAGNET Consortium