Authentication

Cantata has implemented SIP Authentication which includes protective measures to prevent an active attacker from modifying and replaying SIP requests and responses.

Summary of Implementation

 

SIP authentication enables the CSP to validate legitimacy of the subscribers. It is like any login/password based scheme. It ensures that only valid users can make calls through the CSP.

The same cryptographic measures that are used to ensure the authenticity of the SIP message also serve to authenticate the originator of the message. SIP extends the HTTP WWW Authenticate and Authorization header field and their Proxy- counterparts to include cryptographically strong signatures.

The enhancements include support for both authentication and authorization using digest and basic.

Incoming

The host application uses the PPL Event Request message with event ID (12, 0x0C) to authenticate incoming SIP calls.

See the PPL Event Requests.

0x2937 NPDI SIP Authenticate Scheme

0x2938 NPDI SIP Authentication Realm

0x2939 NPDI SIP Authenticate Username

0x293A NPDI SIP Authenticate Password

0x293F NPDI SIP Authentication Timeout

 

Outgoing

The host application uses the Route Control message to authenticate outgoing SIP Calls.

0x293B NPDI SIP Authorization Username

0x293C NPDI SIP Authorization Password

0x293D NPDI SIP Proxy Authorization Username

0x293E NPDI SIP Proxy Authorization Password

See also the call flow for Authenticating an Incoming Call and the SIP Support and Compliance.