Re: [rtcweb] authenticating against IMS HSS/HLR

On 5/30/2012 5:14 AM, Markus.Isomaki@nokia.com wrote:
> ...
> There are some platforms that enable SIM access to at least some special applications. Presumably browser could be one of them and a Javascript API could be also exposed to apps if needed.

Could you please supply a reference to any such platform?
> The web server would need a Radius interface to operator HLR/HSS.

Actually, it would have been Diameter, but in reality the web server 
cannot (and should not) talk to HSS directly; it will talk to an entity 
that maps the IMS identity to OpenID or whatever other identity is used.

Igor
>> -----Original Message-----
>> From: rtcweb-bounces@ietf.org [mailto:rtcweb-bounces@ietf.org] On Behalf
>> Of ext Cameron Byrne
>> Sent: 29 May, 2012 20:03
>> To: rtcweb@ietf.org
>> Subject: [rtcweb] authenticating against IMS HSS/HLR
>>
>> Is there yet a pointer on how a SIM / IMS based identity will work with the
>> webRTC web server for authentication?
>>
>> I think the obvious approach is for the SIM secret key to be bound to a
>> username / password on the web server, and the web server proxies the
>> authentication and registration into IMS (if you give me the right username
>> credentials via the web, i will register you into IMS with the secret key), but
>> that requires the undesirable step of exposing the SIM secret key to the web
>> server or someplace outside the HSS/HLR for binding with the username
>> password.
>>
>> Thoughts?  Pointers?
>>
>> Thanks,
>>
>> CB
>> _______________________________________________
>> rtcweb mailing list
>> rtcweb@ietf.org
>> https://www.ietf.org/mailman/listinfo/rtcweb
> _______________________________________________
> rtcweb mailing list
> rtcweb@ietf.org
> https://www.ietf.org/mailman/listinfo/rtcweb