You are here: CSP Developer’s Guide: Internet Protocol > 4 Session-Initiation Protocol (SIP) Software > Authentication
Excel has implemented SIP Authentication which includes protective measures to prevent an active attacker from modifying and replaying SIP requests and responses.
SIP authentication enables the Excel platform to validate legitimacy of the subscribers. It is like any login/password based scheme. It ensures that only valid users can make calls through the Excel platform.
The same cryptographic measures that are used to ensure the authenticity of the SIP message also serve to authenticate the originator of the message. SIP extends the HTTP WWW Authenticate and Authorization header field and their Proxy- counterparts to include cryptographically strong signatures.
The enhancements include support for both authentication and authorization using digest and basic.
The host uses the PPL Event Request message with event ID (12, 0x0C) to authenticate incoming SIP calls.
See the PPL Event Requests.
0x2937 NPDI SIP Authenticate Scheme
0x2938 NPDI SIP Authentication Realm
0x2939 NPDI SIP Authenticate Username
0x293A NPDI SIP Authenticate Password
The host uses the Route Control message to authenticate outgoing SIP Calls.
0x293B NPDI SIP Authorization Username
0x293C NPDI SIP Authorization Password
0x293D NPDI SIP Proxy Authorization Username
0x293E NPDI SIP Proxy Authorization Password
0x293F NPDI SIP Authentication Timeout
See also the call flow for Authenticating an Incoming Call and the SIP Support and Compliance.