IP Security AG Steve Davies

1
IP Security AGSteve Davies

• Observations
• Large scope Security authentication,
  authorization, integrity, confidentiality and
  non-repudiation
• H.323 v3 v4/SIP define multiple profiles
  (options configurations) for security
• Lack of products using security is hindering
  market acceptance

2
IP Security AG

• NAT/Firewall Observations
• IP calls cannot be completed through a NAT or
  firewall due to PDU-embedded addressing
• Proliferation of NATs in ISPs and home and
  small enterprise networks is preventing
  ubiquitous deployment of IP conferencing
• Reluctance of IT Managers to punch holes in
  firewalls
• Limited availability of proxy devices

3
IP Security AG

• Activities
• Define profiles and test plans
• Simple (yet sophisticated), light-weight
  implementation
• Unified strategy for all VoIP protocols of
  interest (H.323, SIP)
• Provide testing at interoperability events
• Propose profiles to TIA IETF
• Educate members on methods
• Authentication and Integrity using subscription
  Password
• Media encryption with signed diffie-helman for
  distributing keys
• Authentication using Radius servers
• Private/Public Key certificates
• Support e-mail discussions on reflectors

4
IP Security AG

• NAT/Firewall Traversal
• Provide test environment at test events
• Network infrastructure (by Intel, Cisco, Nortel,
  )
• Test plans
• Educate members
• ITU and IETF solutions
• Feed findings back to ITU IETF
• Support e-mail discussions on reflectors
• Resolve implementation issues
• Expand knowledge base