Integrating Usage Control with SIP-Based Communications

الملخص EN

The Session Initiation Protocol (SIP) is a signaling protocol used for establishing and maintaining communication sessions involving two or more participants.

SIP was initially designed for voice over IP and multimedia conferencing, and then was extended to support other services such as instant messaging and presence management.

Today, SIP is also adopted to be used with 3G wireless networks, thus it becomes an integral protocol for ubiquitous environment.

SIP has various methods that support a variety of applications such as subscribing to a service, notification of an event, status update, and location and presence services.

However, when it comes to security, the use of wireless and mobile communication technologies and the pervasive nature of this environment introduce higher risks to security than that of the old simple environment.

In this paper, we introduce new architecture that implements a new type of access control called usage access control (UCON) to control the access to the SIP-based communication at preconnection, during connection, and postconnection.

This will enable prescribers of SIP services to control who can identify their locations to approve or disapprove their subsequent connections, and to also set some parameters to determine whether a certain communication can continue or should terminate.