[Sip] Inquiry: Authentication in Reciever's Domain

Couret Tabt <courettabt@gmail.com> Sun, 17 January 2010 09:23 UTC

DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=RvAb7UhWmOCyGgwtfw2kPczNiQyH3etda7rV/eSxKKbMhcA0LHDj//lzu5oHHbLEQA RrFldK7gsvEG4yLiP/Yta+8c0i2VlAjJD9XpvUdp2sHcnsJ7QluJvtRkpeKxOSnREpJK PWd8Dyu+l/494Vv0/oCaXfi7rT0g4Ur87NhA0=
MIME-Version: 1.0
Date: Sun, 17 Jan 2010 18:23:37 +0900
Message-ID: <13bdfb281001170123p4883eb2bkb8955d52ceefc525@mail.gmail.com>
From: Couret Tabt <courettabt@gmail.com>
To: Sip@ietf.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: [Sip] Inquiry: Authentication in Reciever's Domain
Precedence: list

Dear folks,

I have a question about SIP Authentication Mechanism below:

In inter-domain (e.g.proxy-proxy) we can use RFC4474(SIP Identity)
 for user authentication, but, inside domain, how can a receiver
or a proxy in receiver side authenticate each other?

This means the followings:

CASE 1) Spoofing of Receiver:
After a Receiver's UA registered, without re-register
other user use the address that the former user registered.
(Then the former user is NOT unregistered by the proxy.)

Invite: Alice(in Atlanta) to Bob(in Biloxi)

Alice --->Atlanta--(RFC4474 Authentication)------>Biloxi---->Bob

             *But actually,

   this is spoofing user

               (NOT Bob)

CASE 2)Spoofing of Proxy:
In attacks like Man-in-the-Middle, barge-in user spoof Receiver side Proxy.

Alice --->Atlanta--(RFC4474 Authentication)------>Biloxi---->Bob

*But actually,

this is spoofing proxy

 (NOT Biloxi)


If you know it(how to authenticate), please let me know.

*I have studied about SIP more.
Is it appreciate that in this mailing list I have any above discussions?
Please let me know, too.

Thanks,
Tabt

[Sip] Inquiry: Authentication in Reciever's Domain Couret Tabt