Abstract :
The SIP (Session Initiation Protocol) [RFC3261] is an IETF standard signalling protocol that allows creation, modification and termination of multimedia sessions, such as voice over IP (VoIP) calls, with one or more participants for either point-to-point or multiparty sessions. Using SIP in a peer to peer (P2P) setting has been attracting an increasing attention. The motivation to P2P SIP comes from the inherent properties of peer to peer networks such as self-stabilization, fault tolerance, load balancing, efficient searching, and the ability to accommodate transient populations of nodes without requiring a global centralized server. P2P model however introduces new security challenges. In this work, we explore trust management in SIP P2P networks. We build trust by enabling peers to share authentication information, and attributes pertaining to nodes or resources. Then each peer makes his own judgment on the level of trust that can be accorded to other unknown peer using the "Web of Trust" concept. Our scheme uses the XML-based security assertion markup language (SAML), a standard, flexible, and extensible language for exchanging security information.
Keywords :
XML; peer-to-peer computing; signalling protocols; telecommunication security; IETF standard signalling protocol; VoIP; Web of Trust; XML-based security assertion markup language; fault tolerance; load balancing; multimedia session; peer-to-peer network; session initiation protocol; trust management; Authentication; Fault tolerance; Information security; Information technology; Markup languages; Network servers; Peer to peer computing; Proposals; Protocols; Technology management;