Hi ,
I think what shikar means is,before delivering he wants to ensure that
the WiFi SIP agent is not somebody spoofing the contact against which a
valid SIP UA had registered earlier ...
I do not think there is any standardised mechanism to include
authentication challenge in the SIP INVITE ...
Once u have registered a contact u have to live with it :)
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Somesh S
Shanbhag
Sent: Thursday, October 13, 2005 10:43 AM
To: Shikhar Sarkar; [email protected]
Subject: Re: [Sip-implementors] Authenticating an incoming SIP call

Shikar,

       IAM                    Invite
SS7----------->Softswitch------------->WiFi SIP
device

I think the incoming SS7 call (IAM message) can be authenticated in SS7
way, But when Softswitch translates IAM to INVITE, when it reaches WiFi
SIP user, it may again authenticate by sending 401 Authentication
required (User to User Authentication is allowed).

We can include Authorization header in the request
(INVITE) (for 401).

Regards,
Somesh S. Shanbhag


--- Shikhar Sarkar <[EMAIL PROTECTED]> wrote:

> Guys,
>
> Is there a way to authenticate a SIP user for incoming call scenario
> such
> as:
>        IAM                    Invite
> SS7----------->Softswitch------------->WiFi SIP
> device
>
> The WiFi SIP device of course has already registered with Softswitch.
> But is that enough to assume that there is no clone/eavesdropper? I am

> wondering why I always see 401/407 challenges always opposite to the
> direction of Invite. Is there a way to include Authentication
> challenge in the Invite itself?
>
> Please throw some light.
>
> Shikhar
>
> _______________________________________________
> Sip-implementors mailing list
> [email protected]
>
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
>



        
__________________________________
Yahoo! Music Unlimited
Access over 1 million songs. Try it free.
http://music.yahoo.com/unlimited/
_______________________________________________
Sip-implementors mailing list
[email protected]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors



Confidentiality Notice

The information contained in this electronic message and any attachments to 
this message are intended
for the exclusive use of the addressee(s) and may contain confidential or 
privileged information. If
you are not the intended recipient, please notify the sender at Wipro or [EMAIL 
PROTECTED] immediately
and destroy all copies of this message and any attachments.

_______________________________________________
Sip-implementors mailing list
[email protected]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to