Q2 assertion of identities by the p cscf assertion of

Info icon This preview shows pages 95–97. Sign up to view the full content.

View Full Document Right Arrow Icon
Q.2 Assertion of identities by the P-CSCF Assertion of identities by the P-CSCF is currently described in TS 24.229 [8], clause 5.2.6.3. This clause is referenced in Annex N.2.1 of this specification. The underlying assumption of this clause is the use of IMS AKA with IPsec. It is briefly recapped how identity assertion works for IMS AKA with IPsec as this helps to understand its use in Annex N: The P-CSCF stores the IP address and port together with the IMPI and the registered IMPUs in an “SA table” during a successful registration. The idea of identity assertion for non-registration message is that the P-CSCF securely knows from the source IP address and port, tied to the IPsec security association, which user sent the non-registration message. The P-CSCF therefore can assert to the S-CSCF that a certain IMPU is related to the sender of the non-registration message. The P-CSCF uses the P-Asserted-Identity header for this purpose. The S-CSCF has to rely on the P-CSCF for the verification of user identities as the security is provided by IPsec which terminates at the P-CSCF. The relevant paragraphs from TS 24.229, clause 5.2.6.3, are: “When the P-CSCF receives an initial request for a dialog or a request for a standalone transaction, and the request contains a P-Preferred-Identity header that matches one of the registered public user identities, the P-CSCF shall identify the initiator of the request by that public user identity. 3GPP 3GPP TS 33.203 V12.67.0 (2014-0609) 95 Release 12
Image of page 95

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
When the P-CSCF receives an initial request for a dialog or a request for a standalone transaction, and the request contains a P-Preferred-Identity header that does not match one of the registered public user identities, or does not contain a P-Preferred-Identity header, the P-CSCF shall identify the initiator of the request by a default public user identity. If there is more than one default public user identity available, the P-CSCF shall randomly select one of them. NOTE 1:The contents of the From header do not form any part of this decision process.” It is clear that the S-CSCF needs to be certain about the user identities associated with a non-registration message, e.g. for charging purposes or for being able to convey the asserted identities to application servers (ASs). The concept of identity assertion may be applied to the three authentication mechanisms for non-registration messages, which may be used in conjunction with SIP Digest authentication for registrations, as follows: - TLS: This case is very similar to the IPsec case as the P-CSCF knows the originator of a message from the TLS session (i.e. security association) with which the corresponding packet was protected. The procedures in TS 24.229, clause 5.2.6.3 apply without changes. - IP address check: This case is also similar to the IPsec and TLS cases. The P-CSCF knows the originator of a message from the association of IP address and, if applicable, port with the user identities in the IP address check table which it established during registration. The procedures in TS 24.229, clause 5.2.6.3 apply in the P-CSCF without
Image of page 96
Image of page 97
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern