Secure Telephone Identity Problem Statement and Requirements
Metadata
- Publisher
- IETF
- Doc Type
- Informational
- Pages
- 25
- Abstract
- Over the past decade, Voice over IP (VoIP) systems based on SIP have replaced many traditional telephony deployments. Interworking VoIP systems with the traditional telephone network has reduced the overall level of calling party number and Caller ID assurances by granting attackers new and inexpensive tools to impersonate or obscure calling party numbers when orchestrating bulk commercial calling schemes, hacking voicemail boxes, or even circumventing multi-factor authentication systems trusted by banks. Despite previous attempts to provide a secure assurance of the origin of SIP communications, we still lack effective standards for identifying the calling party in a VoIP session. This document examines the reasons why providing identity for telephone numbers on the Internet has proven so difficult and shows how changes in the last decade may provide us with new strategies for attaching a secure identity to SIP sessions. It also gives high-level requirements for a solution in this space.
- Publication Date
- 2014-09-01
- Status Note
- Informational
- DOI
10.17487/RFC7340- Link
- https://doi.org/10.17487/RFC7340
- Author(s)
- Jon PetersonHenning SchulzrinneHannes Tschofenig
- Keyword(s)
- SIP, XMPP, Communication Security, RTCWEB
Latest version of IETF RFC 7340
Document Versions — IETF RFC 7340
-
▶ IETF RFC 7340 (2014-09-01)THIS DOC [ACTIVE] [LATEST VERSION]
Bibliographic Reference(s)
- Federal Communications Commission (FCC), "Robocalls", April 2013, < http://www.fcc.gov/guides/robocalls >. EXTERNAL
- The Federal Bureau of Investigation (FBI), "Don't Make the Call: The New Phenomenon of 'Swatting'", February 2008, < http://www.fbi.gov/news/stories/2008/february/ swatting020408 >. EXTERNAL
- Cooper, A., Tschofenig, H., Peterson, J., and B. Aboba, "Secure Call Origin Identification", Work in Progress, November 2012. EXTERNAL
- Federal Trade Commission (FTC), "FTC Robocall Challenge", < http://robocall.challenge.gov/ >. EXTERNAL
- Wikipedia, "News International phone hacking scandal", June 2014, < http://en.wikipedia.org/w/index.php?title=News _International_phone_hacking_scandal&oldid=614607591 >. EXTERNAL
- Barnes, M., Jennings, C., Rosenberg, J., and M. Petit- Huguenin, "Verification Involving PSTN Reachability: Requirements and Architecture Overview", Work in Progress, December 2013. EXTERNAL
- Krebs, B., "DHS Warns of 'TDoS' Extortion Attacks on Public Emergency Networks", April 2013, < http://krebsonsecurity.com/2013/04/dhs-warns-of-tdos- extortion-attacks-on-public-emergency-networks/ >. EXTERNAL
- Peterson, J., "Retargeting and Security in SIP: A Framework and Requirements", Work in Progress, February 2005. EXTERNAL
- IETF RFC 3261 [Active*]
- IETF RFC 3263 [Active*]
- IETF RFC 3324 [Active*]
- IETF RFC 3325 [Active*]
- IETF RFC 3966 [Active*]
- IETF RFC 4474 [Superseded*]
- IETF RFC 4916 [Active*]
- IETF RFC 5039 [Active*]
- IETF RFC 5727 [Active*]
- IETF RFC 6698 [Active*]
- IETF RFC 7258 [Active*]
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC7340.json
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 7340, Secure Telephone Identity Problem Statement and Requirements. Available at https://doi.org/10.17487/RFC7340
Snippet:
IETF RFC 7340, Secure Telephone Identity Problem Statement and Requirements. Available at https://doi.org/10.17487/RFC7340
HTML (ISO 690 compliant)
Preview:
IETF RFC 7340, Secure Telephone Identity Problem Statement and Requirements. Available at https://doi.org/10.17487/RFC7340
Snippet:
<span class="citation"><cite>IETF RFC 7340</cite>, Secure Telephone Identity Problem Statement and Requirements. Available at <a href="https://doi.org/10.17487/RFC7340" target="_blank" rel="noopener">https://doi.org/10.17487/RFC7340</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 7340, Secure Telephone Identity Problem Statement and Requirements
doi: 10.17487/RFC7340
url: https://doi.org/10.17487/RFC7340
doi: 10.17487/RFC7340
url: https://doi.org/10.17487/RFC7340
Snippet:
<li> <cite id="bib-rfc7340">IETF RFC 7340</cite>, Secure Telephone Identity Problem Statement and Requirements <span class="doi">10.17487/RFC7340</span> </li>
Referenced By
- IETF RFC 7375 [Active*]
- IETF RFC 8224 [Active*]
- IETF RFC 8946 [Active*]