You are on page 1of 75

Virtual Home Environment

(VHE)

Personalised Mobile Services Concept


Virtual Home Environment
n VHE is the concept of a portable Personal Service
Environment (PSE)

n Specified by ETSI/3GPP

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Virtual Home Environment
n Goal:
The user shall have access to the same personalised
features, customised UI and services no matter what
network or terminal is currently in use, and no matter
where the user is located.

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Virtual Home Environment
n A foreign network emulates the behaviour of the
users home network
n The user can access the same services, in the
same way, as he is used to in the home network

User
User
Service Access Service Access

Equal
Home
HomeNetwork
Network Foreign
ForeignNetwork
Network

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Virtual Home Environment
n The VHE concept is supported by mechanisms in
several other ETSI/3GPP standards:
n Open Service Access (OSA)
n Customised Applications for Mobile Enhanced Logic
(CAMEL)
n Mobile Station Application Execution Environment
(MExE)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Virtual Home Environment

n The mechanisms in VHE are realised using


various technologies:
n JAIN
n CORBA
n XML
n WAP
n J2ME

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Internet Technologies
Mobile
Network
Terminal

Web Service

Session Initiation Protocol

OMA Liberty Alliance

J2ME VHE OSA

MExE Internet
Gateway WEB/WAP server
SAT
Gateway
Mobile network

Enterprise Intranet
WEB browser

Mobile phone

IP telephone
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Session Initiation Protocol (SIP)

Application-layer Signaling Protocol for


the Next Generation Internet
Session Initiation Protocol (SIP)
n Introduction
n SIP Signaling Architecture
n Registration, multimedia call initiation, IP and PSTN
interworking, event notification framework
n SIP Service Creation Tools
n Basic SIP signaling, CPL, CGI, Servlets
n SIP in 3G Network Architecture
n IP Multimedia Subsystem (IMS)
n More SIP Topics
n AAA interaction, NAT and firewall traversal, QoS setup
n Remarks
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Introduction
n A protocol to initiate Internet multimedia sessions: voice,
video, conference etc.
n Other applications: Event notification, instant messaging etc.
n Developed in IETF (www.ietf.org): RFC 3261
n Key features
n Request messages (methods) & responses (numeric codes)
n SIP messages are text-encoded similar to HTTP
n SIP messages can be sent over UDP or TCP (or SMTP)
n Each hop can potentially use different transport protocol
n Web-like addressing (user@domain or user@host)
n sip: thanh-van.do@telenor.com or sip: do@172.19.165.243
n Distributed, open, scalable and extensible architecture

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP Signaling Architecture
Key Network Elements

Application Servers DNS Location Server


IP
Network

Non SIP

SIP SIP Server/


SIP Server/ SIP Proxy
SIP Proxy
sip.here.com sip.there.com SIP
User SIP
Agent SIP
SIP
User User
Agent User Agent
Agent
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Registration: Pre-call Personal Mobility
App. Servers DNS Loc. Server

REGISTER sip:there.com
SIP Proxy SIP Proxy From: Tom Cat <sip:tom@there.com>
Contact: <sip:tom@172.12.34.100>
REGISTER
200 OK
200 OK sip.here.com sip.there.com
REGISTER
REGISTER
200 OK
REGISTER sip:there.com
From: Tom Cat <sip:tom@there.com>
REGISTER sip:here.com Contact: Tom Cat <sip: tom@cell.com>
From: Jerry Mouse <sip:jerry@here.com>
Contact: <sip: jerry@192.30.40.22>
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Multimedia Call Initiation
INVITE/200 OK/ ACK
Location
DNS Server
INVITE sip:tom@there.com
Via: SIP/2.0/UDP sip.here.com:5060
Via: SIP/2.0/UDP 192.30.40.22:5060
To: Tom Cat <sip:tom@there.com>
From: Jerry Mouse <sip:jerry@here.com>
Contact: <sip:jerry@192.30.40.22>
SIP Session Description in SDP SIP
Proxy Proxy
INVITE INVITE

100 Trying

sip.here.com sip.there.com
INVITE INVITE sip:tom@cell.com
INVITE sip:tom@there.com Via: SIP/2.0/UDP 172.12.20.130
SIP/2.0/UDP 192.30.40.22:5060 Via: SIP/2/0/UDP sip.here.com:5060
100 To: Tom Cat <sip:tom@there.com> Via: SIP/2.0/UDP 192.30.40.22:5060
Trying From: Jerry Mouse <sip:jerry@here.com> To: Tom Cat <sip:tom@there.com>
Contact: <sip:jerry@192.30.40.22> From: Jerry Mouse <sip:jerry@here.com>
Session Description in SDP Contact: <sip:jerry@192.30.40.22>
Session Description in SDP

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Multimedia Call Initiation
INVITE/200 OK/ ACK
Location
DNS Server

SIP SIP
Proxy Proxy
180 Ringing 180 Ringing

200 OK

sip.here.com sip.there.com

180 Ringing ACK


200 OK
ACK ACK

Media data transfer over RTP


Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Session Description Protocol
n SDP specifies format to describe multimedia session
n Initially specified (RFC 2327) for announcing multicast
conferences on MBONE
n SDP payload carried in SAP, HTTP or email

n Modified for use with SIP: The offer/answer model


n SDP payload carried in SIP as MIME type application/sdp

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SDP Offer/Answer Model

CALLER CALLEE
v=0 v=0
c=IN IPv4 192.30.40.22 c=IN IPv4 172.12.10.130
m=audio 62986 RTP/AVP 0 4 Offer m=audio 54344 RTP/AVP 0 Accepted
a=rtpmap:0 PCMU/8000 Stream
a=rtpmap:0 PCMU/8000
a=rtpmap:4 GSM/8000 (e.g. in m=video 0 RTP/AVP 31 Rejected
m=video 51372 RTP/AVP 31 INVITE) a=rtpmap: 31 H261/90000 Stream
a=rtpmap: 31 H261/90000 b=100
b=100 Answer a=sendrecv
a=sendrecv m=video 53244 RTP/AVP 32 Accepted
m=video 53000 RTP/AVP 32 (e.g. in a=rtpmap:32 MPV/90000 Stream
a=rtpmap:32 MPV/90000 a=recvonly
200 OK)
a=sendonly a=application 34426 udp wb Accepted
a=application 32416 udp wb a=orient:portrait Stream
a=orient:portrait

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
IP and PSTN Interworking
n Enables SIP phone to call PSTN phone and vice versa
n SIP to PSTN: INVITE +1-781-929-1660@carrier.com, user=phone
n PSTN to SIP: Dial phone number, ENUM maps it to SIP URI

n Requires Gateway between IP network and PSTN


n [MGC] Performs interworking between SIP & SS7 (ISUP) signaling
n [MG] Performs transcoding between IP/UDP/RTP packetized voice
and 64 Kbps (or 56 Kbps) PCM voice

n There are two ways of interworking between SIP & ISUP


n Complete protocol interworking: Mapping messages
n Protocol encapsulation (SIP-T): Map & encapsulate ISUP into SIP
n Avoids losing SS7 information in PSTN-SIP-PSTN calls
n Carry PSTN messages in SIP messages as a MIME message body
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
IP and PSTN Interworking
Conventional
IP Phone SIP Proxy Switch Phone
Gateway

INVITE
INVITE Initial Address
100 Trying Message (IAM)
100 Trying Address Complete
183 Session Progress Message (ACM) Q.931
183 Session Progress

Early media,
e.g. Ring
tone, busy Answer Message (ANM)
200 OK
tone, DMTF 200 OK
etc.
ACK

SIP Messages SS7 Messages


Packetized voice over IP/UDP/RTP PSTN PCM Voice
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
IP and PSTN Interworking
Additional Topics

n TRIP (Telephony Routing over IP) and TRIP-lite


n Finding the gateway for IP to PSTN calls
n TRIP protocol
n Exchanges information of the kind (reachable telephone number,
cost) between gateways (or collections of gateways)

n PINT (PSTN and INTernet INTerworking)


n To invoke PSTN services from within the IP network
n Milestone services: Request (click) to call, request (click) to fax,
request (click) to speak/send/play content
n SPIRITS (Service in the PSTN/IN Requesting InTernet
Service)
n To invoke IP services from PSTN network
n Example service: Display indication on PC when PSTN call arrives
when dial-up Internet is being used

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Event Notification Framework
n Ability to request asynchronous notification of (network-
wide) events
n For example, presence notification
n SIP extensions for event notification
n New methods: SUBSCRIBE, NOTIFY
n Routed similar to INVITE
n Event header in SUBSCRIBE describes the requested event type
n Event types are called Event Packages, each package is described
as separate specification
n SUBSCRIBE and NOTIFY may contain message body consistent
with event package specification
n Authentication of subscriber, authorization to subscribe and
privacy concerns must be addressed by implementations

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Event Notification Framework
Subscriber Notifier
SUBSCRIBE

200 OK
Usually User Usually SIP
Agents, NOTIFY Proxy or
Applications Event Server
on Server 200 OK connected
etc. to SIP proxy
Status Change
NOTIFY

200 OK

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Presence Service
n Presence: My status to others, others status to me!
n Conventionally, online or offline on centralized server
n Presence in broader sense
n Status (online, offline, busy, away), communication means (IM,
voice call, SMS, email), communication addresses, communication
capabilities (voice, video, other applications), location, other
preferences (personalized logos) etc.
n Distributed, scalable and interoperable architecture
n Presence adds new dimension to communication
n Polite calling is expected be a norm in the future
Application

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP for Presence
n Implementation of presence service
n Watcher subscribes to presence information of
presentity (SUBSCRIBE)
n Event: presence header in the SUBSCRIBE request

n Presentity uploads change of communication state


(REGISTER)
n Watcher receives notifications (NOTIFY)
n Aside:
n Another enabler for presence service is available from
Wireless Village initiative, discussed in OMA!

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP for Presence and IM
SUBSCRIBE sip:tom@there.com SIP/2.0
To: Tom Cat <sip:tom@there.com>
From: Jerry Mouse <sip:jerry@here.com>
Contact: <sip:jerry@192.30.40.22>
Event: presence
Accept-Contact: media=audio,video,text; class=personal
SIP SIP Server/
SUBSCRIBE Proxy SUBSCRIBE Presence Agent
200 OK 200 OK
REGISTER
NOTIFY NOTIFY

Watcher here.com there.com Presentity


MESSAGE MESSAGE MESSAGE

200 OK 200 OK 200 OK

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
More Examples of Event Packages
n Watcher information event package (Event: *.winfo)
n Notifications upon change in subscription set to any event package
n For example, when new watcher attempts to subscribe to presence,
notification is generated to application of presentity for authorization
n Application subscribes to presence.winfo event for presentity

n Message waiting event package (Event: message-


summary)
n Notifications about message waiting status and message summaries
from a messaging system to User Agent
n Voice message, text message, multimedia message, fax message
n Dialogue state event package (Event: dialogue)
n Notifications upon change in dialogue state of user
n Usage example: Automatic call-back
n There are others, more will be defined in future
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Basic SIP Service Creation Tools
n Basic tools in SIP signaling architecture
n Methods (Requests) and responses
n Proxy functions: Registration, forward, redirect, fork etc.
n Caller preferences (end-to-end)
n Request headers Accept-Contact, Reject-Contact carry caller
preferences (feature set)
n Compared with callee capabilities (feature set) registered with SIP
URI in REGISTER request
n Number of services are possible using basic SIP signaling
n Flexible, programmable service offering
n Implementation of service logic possible at clients or proxies
n Examples: Pre-call mobility, multimedia call set up, consultation hold,
music on hold, call transfer (attended, unattended), call forward
(unconditional, busy, no answer), 3-way conferencing, find me, call pick
up, automatic redial, presence notification, instant messaging, message
alert etc.
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Call Processing Language (CPL)
n Implements callers/callees call handling preferences
n CPL scripts are executed on SIP proxies/SIP application servers
n CPL execution starts upon arrival of request (e.g. INVITE) at

the SIP server


n CPL is an interpreted language
n Based on XML and specified by IETF IPTEL WG

n User Agent can upload CPL script on SIP server as message

body in REGISTER
n CPL scripts can be generated manually, using user-friendly

GUIs, provided by third parties etc.


n Examples of services with CPL
n Call forwarding based on caller information

n Call screening (anonymous incoming, 900 outgoing etc.)

n Priority routing, language routing, time-of-day routing etc.

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Common Gateway Interface
2. User fills
in form data 1. Request html Database
4. CGI passes form data
page (form) as environment variables
CGI
3. Submit form HTTP application:

CGI
Server Pearl, TCL,
C etc.
Browser 6. Server adds HTTP 5. Application generates customized
Client headers & sends response response (HTML page, GIF file etc.)

n Background - HTTP CGI


n Interface between HTTP server and application server
n SIP CGI is similar to HTTP CGI
n Interface between SIP proxy and application server

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP CGI
SIP Proxy SIP Proxy User Agent
User Agent
Request Request Request

Response Response Response

SIP CGI SIP CGI


CGI Program CGI Program

n SIP CGI Features (that are more than HTTP CGI)


n Richer functionality: Proxying requests, generating responses,
generating new requests etc.
n Persistence: HTTP CGI executes once per transaction, SIP CGI
may execute number of times per transaction
n Triggers: It is possible to store trigger conditions in SIP proxy for
SIP CGI program instantiation
n Different environment variables etc.
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
SIP in 3G Network Architecture
n IP Multimedia Subsystem (IMS)
n Goal: Creation & deployment of multimedia services
in 3G networks
n IP-based transport for real and non-real time services
n Introduction of multimedia call model using SIP
n Some extensions to adapt SIP to cellular network operation
n Example Services
n Videophone, group communication (conferencing,
broadcast presentations), mobile gaming (peer-to-
peer, multiparty), presence, messaging (text and
multimedia), location-based services, and integration
of all these!
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
3GPP IMS Architecture

visited.there.com home.there.com
visited.here.com home.here.com

IMS HSS IMS HSS

I-CSCF

I-CSCF
S-CSCF S-CSCF

INTERNET
I-CSCF I-CSCF

IMS IMS
MGW P-CSCF P-CSCF MGW

PS-CN GGSN GGSN


PS-CN

SGSN SGSN SGSN SGSN SGSN SGSN


RAN RAN

CSCF: Call State Control


Function aka SIP Proxy User Agent User Agent Media Path
Tutorial on Open Mobile Services, SIP Path
MWCN2004 by Do van Thanh
3GPP IMS Entities
n P-CSCF (Proxy Call State Control Function)
n Located in visited network IMS domain, discovered during PDP
context activation
n Provides local and emergency services, participates in SIP
message compression
n Authorizes use of resources in visited PS-CN
n HSS (Home Subscription Server)
n Located in home network IMS domain, stores user profile
n S-CSCF (Serving Call State Control Function)
n Located in home network IMS domain
n Acts as registrar
n Executes home services for user

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP Additional Topics
n QoS for calls initiated using SIP
n SIP signals along control path, QoS signaling (e.g.
RSVP, NSIS) occurs along data path
n COMET method allows rendezvous
n Firewall/NAT traversal for SIP signaling and
subsequent media streams
n Security of SIP messaging
n SIP and AAA

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
SIP References
n Internet Engineering Task Force (www.ietf.org)
n Working groups: MMUSIC, SIP, SIPPING, SIMPLE,
IPTEL, PINT, SPIRITS
n Books
n Internet Communications using SIP, Henry Sinnreich
and Alan Johnson, John Wiley and Sons Inc., 2001
n Websites
n http://www.sipcenter.com
n http://www.cs.columbia.edu/sip/

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
http://www.w3.org/2002/ws/

XML Web Services

Concept for Distributed Computing


over the Internet
The WWW
Web server
Documents
in HTML

WWW
Web browser

Web surfing!

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Web browser Uniform Resource Locator Web server

1. http://www.telenor.com/doc1

2. Locate & fetch doc 1


3. Return doc 1

4. Interpret doc 1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

Tags
<html>
<head>

5. Display doc 1 on the screen <title>PANDA - Personal Area Networks &amp; Data Applications</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<link href="main.css" rel="stylesheet" type="text/css">
</head>

<body>
<table width="75%" border="0">
<tr>
<td><img src="panda.gif" width="128" height="128" align="left"></td>
<td class="textnormal">
<h1>PANDA, Personal Area Networks &amp; Data Applications</h1>
<p>Welcome to PANDA's place on the web</p>
<p><a href="info.html">[Klick here to read about the project]</a></p>
</td>
</tr>
</table>
</body>
</html>

HyperText
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Limitations of HTML
n Allows information navigation but only supports
static information i.e. static files
n Made for information in English or using Latin
alphabet
n No support for other languages such Chinese,
Arabic, Thai, etc.
n No support for Mathematics, Chemistry or
Biology, etc.
Because the content is incorporated together with
the presentation.
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
XML
n To remedy the situation, with XML (eXtensible
Markup Language), the content is separated
from the presentation and logic.
n Tags are no longer predefined but are now defined
in Document Type Definition (DTD) or XML
schemas
n Declarations define the logical structure
n References
n Processing instructions

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Distributed Computing with XML
n XML can now be used to build applications that
are distributed over the whole World Wide Web
n XML relieves distributed computing from the need
to be based on specialized middleware platforms

n XML enables the use of services over company


borders, firewalls, different suppliers,
infrastructure and technologies

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
XML Web Services Architecture

registry 2. Discovery of
1. Publish
suitable services
service
and how to
description
communicate
with them

3. Service
Invocation

Web Service Web Service


Provider Client

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Some Core Standards
Find
Universal Description Discovery and Integration
UDDI
Describe
Web Service Description Language
WSDL
Invoke
Simple Object Access Protocol
SOAP
Data format
XML, XML Schema
Transport
HTTP, SMTP

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Using the Standards

2. Publish UDDI 3. Find

1. Build 4. Get WSDL File

Provider Client
6. Use (SOAP) 5. Make Proxy
and client (tools)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Web Services for Mobile Devices
CLIENTS WEB APPLICATION
SERVICES LOGIC
User
Laptop

Mobile phone

PDA

n With the Web service concept, service can be accessed


ubiquitously via heterogeneous mobile devices with
tailored web service clients
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Web Services for Mobile Devices
SOAP Method
Invocation

Mobile phone
Mail application
Mail Web service

PDA n Different mail clients can


ubiquitously access to the
same mail application
n Content presentation
Stationary PC
adapted to the device
Different mail clients
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Some Web Services Players
n Microsoft .NET n OASIS
n IBM n W3C
n Sun One n IETF
n Oracle n OMG
n HP n Uddi.org
n BEA n Acronym factories
n SilverStream
n SAP AG
n Iona
n Systinet
n New entrants every day!

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Microsoft .NET
n .NET is Microsofts new vision
n .NET framework and platform
n Server and client software
n Development environment: Visual Studio .NET
n C# programming language
n .NET My Services

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Compatibility and Interoperability
n Compatibility between .NET platforms
n Compatibility between J2EE platforms
n In .NET platform Web Service and WS clients are
implemented in C# and are therefore not executable in
J2EE platform using Java
n However, Most important:
Since the 3 basic protocols UDDI, WSDL and SOAP are
standardised, .NET and J2EE platforms are interoperable!

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
.NET Framework Architecture

VB.NET C++ C# Perl ...

Common Language Specification (CLS)

Web Services User Interface Visual


Studio
Data and XML .NET

Base Class Library

Common Language Runtime (CLR)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
.NETs competition: J2EE

n IBM, SUN, Silverstream, BEA,


Oracle, HP, CapeClear, Iona,
Systinet, etc. build on J2EE
compatible platforms
n J2EE does not include Web
Service specification yet

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Identity
Privacy

Profile
Liberty Alliance Authentication

Technology for Simplified Navigation


and Usage of Mobile Services
Motivation

Accessing mobile Internet


can be cumbersome today!

To enter the service you


needed a total of:

61 clicks

(7 for navigating and 54


for entering information)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Liberty Alliance Vision
n Situation Today: Users network identity is
fragmented across different service providers
n Multitude of accounts (usernames, password, profiles)
n Account creation and service usage can be
cumbersome
n Especially, when working from mobile devices keypad

n Target Situation: Seamless mobile web


transactions across providers while not
compromising security and privacy
n Approach: Federated Network Identity

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
What is Liberty Alliance?
n Consortium of broad spectrum of companies
n Objective: To create open, standards-based, platform-agnostic
specification for federated network identity
n 18 founder members, 25 sponsor members (at the start in
April02) now 150 companies & organization
n Status of Work
n Liberty Identity Federation Framework ID-FF 1.0 released in Q3,
2002
n See www.projectliberty.org
n Liberty Identity Web Service Framework ID-WSF released Q2 2003
n ID-FF 1.2 and ID-WSF final released in Q4 2003
n 9 conformant products in Q2 2004

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Federated Network Identity
n Circle of Trust
n Affiliation of Identity Providers (IdP) and Service
Providers (SP) based on Liberty-enabled technology
and on operational agreements
n Account Federation
n Users link isolated accounts within the circle of trust
n Link SP account(s) to IdP account(s) opt in policy
n Service Usage
n Users perform web transactions within the circle of
trust in a secure and seamless manner
n Authenticate with IdP and hop across linked SP accounts

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Federated Network Identity
IdP (e.g.
Operator.com) User has accounts at:
IdP, SP1, SP3
User

Account
Federation
SP1 SP2 SP3
(Yahoo.com) (Toys.com) (Puppies.com)

Circle of Trust

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Account Federation SP1: Yahoo.com
IdP: BostonDude
Known as:
Operator.com abcd1234@Operator.com
JoeSelf
Known as: SP3: Puppies.com
abcd1234@Yahoo.com PetBoy
ewfghwxyz@Puppies.com Known as:
efghwxyz@Operator.com
n End user consent is must before federating accounts
n End user allowed to maintain different identities at
different IdPs and SPs JoeSelf, BostonDude, PetBoy
n Opaque handles are exchanged between IdP and SP at
the time of account federation
n IdP wont know users usernames at SPs
n Once accounts are federated, user can do single sign on
in future
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Single Sign On (SSO)
IdP SP
User
(Operator.com) (Yahoo.com)

User browses Yahoo


Yahoo determines IdP as Operator.com using Introduction Protocol

(HTTP Redirect/Post) Authentication Request

Authenticates user as JoeSelf

(HTTP Redirect/Post) Authentication Response (abcd1234)

Confirm
Yahoo logs user in as BostonDude
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Liberty Version 1.x Specification
n Liberty Identity Federation Framework ID-FF 1.0 released
in Q3, 2002
n See www.projectliberty.org
n Federation of User Accounts
n Simplified Sign On (SSO) & Global Logout
n De-Federation
n Liberty Identity Web Service Framework ID-WSF 1.0
released Q2 2003 Introduction Protocol

Assumes a single Circle of Trust!

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Introduction Protocol
n How does SP know that user has account with or
is currently authenticated with IdP?
n User reaches SP from IdP portal
n User enters or checks IdP name on SPs page
n Common domain cookie
n Introduction useful both at time of account
federation and SSO

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Liberty v1.x Architectural Components
2. Web Services
3. Metadata & Schemas
Identity Service
Provider Users Provider
1. Web Redirection
n Web Redirection
n Creates communication channel between IdP and SP rooted at
(installed base of) user agent
n Based on HTTP-redirect or Form-POST
n Web Services
n Enables network entities to directly communicate
n Based on SOAP
n Metadata & Schemas
n Information and its format exchanged between IdP and SP
n Identity (opaque handle), authentication context, provider metadata

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Liberty v 1.x Architectural Components
n SSO profiles
n Liberty Browser Artifact
n Liberty Browser POST
n Liberty WML POST
n Liberty Enabled Client/Proxy (LECP)

n Authentication profile
n SP indicates to IdP which user authentication
mechanisms are acceptable

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Future Releases
n Phase 2
n Interaction across circles of trust
n Delegation of authority to IdP for federation
n Attribute transfer
n Anonymous attribute transfer
n Attribute transfer to affiliations
n Usage attributes

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Attribute Transfer (Federation)
IdP Attribute Provider (AP)
User
e.g. Location

User authenticates as CoolGuy. Sets attributes and Permissions

Federation Request (xyz001, Loc)

Obtains user consent for federation

Authenticates user as JoeSelf

Federation Response (xyz001)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Attribute Transfer (Usage)
JoeSelf BostonDude CoolGuy
User IdP SP (Yahoo.com) AP (LocP.com)

User browses Yahoo


Auth (abcd001) + Discovery Request (Loc)

Auth Response (abcd0001)


Discovery Response (xyz001)
Location Attribute Req (xyz001)
Response with Loc of CoolGuy
Welcome BostonDude, how is Scottsdale?
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Other SSO Technology
n Microsoft .NET Passport
n Launched in 1999
n Provides following services
n Single Sign-In (SSI)
n SSI vs SSO, just a different name
n .NET Passport express purchase
n Fast purchasing capability
n Stores user billing (e.g. credit card number) and shipping information
n Others
n Kids Passport
n Enables website compliance with COPPA (April 2000, US)
n Debate - not here please!
n Proprietary or open?

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Summary
n SIM Application Toolkit, MExE, J2ME
n Terminal environments for creation & execution of mobile
applications
n Sophisticated mobile applications for end user, ability for
application developers to reach out to large population of end
users
n Open Mobile Alliance (OMA)
n Technology enablers for future mobile services
n Interoperable services
n Parlay/Open Service Access (OSA)
n Generic APIs to access wireless network capabilities
n 3rd party services, rich service spectrum for end user, control
point for revenue generation for wireless operator
n Virtual Home Environment (VHE)
n Personalized services concept

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Summary (cntd.)
n Session Initiation Protocol (SIP)
n Personal mobility, multimedia call initiation, event framework (instant
messaging and presence)
n Flexible service creation and provision, 3 rd party services,
personalization of call handling preferences, aligned with Internet
protocols (standardized by IETF)
n Mobile Web Services
n Framework for distributed computing on the Internet
n Ubiquitous access to services, assembly of mobile service through
components from different application providers
n Liberty Alliance
n Simplified sign on, navigation, and attribute and credential sharing
across mobile services
n Ease of usage and navigation of mobile services, simpler deployment
and integration of services
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Towards Open Mobile Services
Mobile
Network
Terminal

Web Service

Session Initiation Protocol

OMA Liberty Alliance

J2ME VHE OSA

MExE Internet
Gateway WEB/WAP server
SAT
Gateway
Mobile network

Enterprise Intranet
WEB browser

Mobile phone

IP telephone
Tutorial on Open Mobile Services,
MWCN2004 by Do van Thanh
Section III:

Future Directions

IT
companies

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
The User in Focus
The user will be using
n several devices

n connected to heterogeneous networks

n to access to services offered by

n Wireless operators
n Service Providers
n Content Providers
n Enterprises
n in a personalised way.

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Total Convergence
n Fixed Mobile Convergence
n Ubiquitous service access from any device
n Communication Computing Content Convergence
n All types services are accessible via the same device
n Public Private Convergence
n Service providers and private enterprises
n Personal Company Convergence
n Personal services and enterprise services

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Issues to be Addressed
Technological issues are important, but there are
others too:
n Judicial:
n Who owns the user profile used in the personalisation?
n Who may have access rights to the use profile?
n Economic:
n How should the service subscription be?
n Who is paying for what piece service?
n Administrative:
n Who defines the service access rules (company vs.
operator, user vs. service provider)

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
A Few More Steps in the Future

Communications Plain-old

between Devices
phone

Local short-range wireless


Cordless
n phone

technologies enable device Laptop as


H323 terminal
communication Mobile phone

Devices can collaborate to


PC as SIP
n terminal

serve the user better PDA Lapto


p
User
n Applications and services will
be intelligently distributed Workstation
Interactive
over multiple heterogeneous Camcorder
TV

devices and provide a Microphone

coherent interface to the Digital


camera
user Printer

n New type of services will be


born

Tutorial on Open Mobile Services,


MWCN2004 by Do van Thanh
Thank you!

You might also like