SIP
Beyond WebSSO BoF at TNC2009
Here are a couple of slides I put together in the last minute before the BoF started at TNC2009 in Malaga.
Authentication and encryption of IP telephony
This document specifies a means for transporting authenticated identity info during Session Initiation Protocol signaling without the need for a fully deployed Public Key Infrastructure. The established trust is transfered to the following media session and used to perform secure key agreement between the end-points for encryption of the media session.
This paper was written as a final year project assignment by Jøran Vagnby Lillesand at Department of Telematics at the Norwegian University of Science and Technology.
Authentication in SIP
A presentation was held at UNINETT in November 2006 about authentication mechanisms in SIP (Session Initiation Protocol), and I just made it available on the web.
I discuss SAML, Feide, eduroam, 802.1x, NAS-SAML, etc and SIP extensions.