Authenticated Identity Body

Authenticated Identity Body (AIB) is a mechanism used in the Session Initiation Protocol (SIP) to verify the identity of the sender of a message. It allows communicating parties in a network to exchange authenticated identity information, improving the security and integrity of SIP communications such as Voice over IP (VoIP) calls.

An AIB works by embedding a digitally signed section inside a SIP message. The sender signs specific SIP headers such as From, To, or Call-ID to prove that the message genuinely originates from the claimed identity. Additional headers, such as Date or Contact, may also be included in the signed data to protect against replay attacks and maintain reference integrity.

AIBs build upon existing authentication methods like S/MIME, but are designed to be more narrowly focused on verifying message origin and preventing identity spoofing in SIP environments.

The specification for Authenticated Identity Bodies is defined in RFC 3893. According to the document, AIBs may optionally be encrypted to protect end-to-end privacy. In such cases, encryption should occur before the AIB is signed. The security of the encrypted AIB depends on proper key distribution among trusted hosts, which may be practical in controlled networks (for example, within telephone providers or federations of trusted systems).[1]

See also

  • RFC 3893
  • Session Initiation Protocol
  • Encryption
  • Cryptography

References

  1. ^ Peterson, Jon (2004). Session Initiation Protocol (SIP) Authenticated Identity Body (AIB) Format (Report). Internet Engineering Task Force. doi:10.17487/rfc3893.


Stub icon

This computer networking article is a stub. You can help Wikipedia by adding missing information.

Stub icon

This cryptography-related article is a stub. You can help Wikipedia by adding missing information.

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.