You are here: CSP Developer’s Guide: Internet Protocol > 4 Session-Initiation Protocol (SIP) Software > Authentication
Cantata has implemented SIP Authentication which includes protective measures to prevent an active attacker from modifying and replaying SIP requests and responses.
SIP authentication enables the CSP to validate legitimacy of the subscribers. It is like any login/password based scheme. It ensures that only valid users can make calls through the CSP.
The same cryptographic measures that are used to ensure the authenticity of the SIP message also serve to authenticate the originator of the message. SIP extends the HTTP WWW Authenticate and Authorization header field and their Proxy- counterparts to include cryptographically strong signatures.
The enhancements include support for both authentication and authorization using digest and basic.
Incoming
The host application uses the PPL Event Request message with event ID (12, 0x0C) to authenticate incoming SIP calls.
See the PPL Event Requests.
0x2937 NPDI SIP Authenticate Scheme
0x2938 NPDI SIP Authentication Realm
0x2939 NPDI SIP Authenticate Username
0x293A NPDI SIP Authenticate Password
0x293F NPDI SIP Authentication Timeout
The host application uses the Route Control message to authenticate outgoing SIP Calls.
0x293B NPDI SIP Authorization Username
0x293C NPDI SIP Authorization Password
0x293D NPDI SIP Proxy Authorization Username
0x293E NPDI SIP Proxy Authorization Password
See also the call flow for Authenticating an Incoming Call and the SIP Support and Compliance.