RFC 3702 (rfc3702) - Page 1 of 15


Authentication, Authorization, and Accounting Requirements for the Session Initiation Protocol (SIP)



Alternative Format: Original Text Document



Network Working Group                                        J. Loughney
Request for Comments: 3702                                         Nokia
Category: Informational                                     G. Camarillo
                                                                Ericsson
                                                           February 2004


             Authentication, Authorization, and Accounting
         Requirements for the Session Initiation Protocol (SIP)

Status of this Memo

   This memo provides information for the Internet community.  It does
   not specify an Internet standard of any kind.  Distribution of this
   memo is unlimited.

Copyright Notice

   Copyright (C) The Internet Society (2004).  All Rights Reserved.

Abstract

   As Session Initiation Protocol (SIP) services are deployed on the
   Internet, there is a need for authentication, authorization, and
   accounting of SIP sessions.  This document sets out the basic
   requirements for this work.

Table of Contents

   1.  Introduction . . . . . . . . . . . . . . . . . . . . . . . . .  2
       1.1.  RADIUS . . . . . . . . . . . . . . . . . . . . . . . . .  3
       1.2.  Terminology and Acronyms . . . . . . . . . . . . . . . .  4
       1.3.  Requirements Language. . . . . . . . . . . . . . . . . .  4
   2.  Requirements . . . . . . . . . . . . . . . . . . . . . . . . .  4
       2.1.  Common Requirements. . . . . . . . . . . . . . . . . . .  5
             2.1.1.  Communication within the Same Domain . . . . . .  5
             2.1.2.  Communication between Different Domains. . . . .  5
             2.1.3.  Discovery. . . . . . . . . . . . . . . . . . . .  5
             2.1.4.  Ability to Integrate Different Networks,
                     Services and Users . . . . . . . . . . . . . . .  5
             2.1.5.  Updating SIP Server Entries. . . . . . . . . . .  5
             2.1.6.  SIP Session Changes. . . . . . . . . . . . . . .  5
             2.1.7.  Reliable Transfer of Protocol Messages . . . . .  5
             2.1.8.  Call Setup Times . . . . . . . . . . . . . . . .  6
             2.1.9.  Security . . . . . . . . . . . . . . . . . . . .  6
       2.2.  Authentication Requirements. . . . . . . . . . . . . . .  6
             2.2.1.  Authentication Based on SIP Requests . . . . . .  6
             2.2.2.  Flexible Authentication of SIP Requests. . . . .  6



Loughney & Camarillo         Informational