1 TELEFÓNICA I+D Date: 23rd September 2008 Proposal for a Convergent Authentication and Authorisation Infrastructure in NGN © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal
2 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 2 Motivations Why? Current fixed platforms require complex user-provisioning processes. Simplify process and reduce OPEX!!! User identity is attached to the physical access line. Enable nomadic services!!! Mobile and fixed networks have different authentication mechanisms. Design a convergent Platform!!! PPP does not support multicast IPTV traffic. Native support of Triple-Play and Advanced Services!!! 01
3 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 3 Design decisions 02 Req. 1: Access Line Independent User-Identity Req. 2: Fixed-Mobile Convergence Req. 3: Well-defined and widely deployed Protocols Req. 4: Enable Triple-Play Services
4 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 4 System architecture 03
5 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 5 04 Procedures Authentication procedure
6 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 6 04 Procedures Authentication procedure
7 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 7 04 Procedures Authentication procedure
8 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 8 04 Procedures Authentication procedure
9 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 9 04 Procedures Authentication procedure
10 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 10 04 Procedures Authentication procedure
11 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 11 Conclusions Pros and Cons Home Gateway hardware becomes more complex (Smart Card reader) Convergent QoS Architecture and user location retrieval is not full defined yet. 05 Unified fixed and mobile authentication platforms (TISPAN & 3GPP). Zero-provisioning systems. Advanced services for residential users: nomadism
12 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 12 Contact Information Telefónica I+D (website: www.tid.es) Broadband Services Platforms and Architectures Department Joaquín López Rizaldos ([email protected])[email protected] Alejandro Fandiño Orgeira ([email protected])[email protected] Alejandro García Henderson ([email protected])[email protected] Jose Manuel Palacios Valverde ([email protected])[email protected] Francisco Rodríguez García ([email protected])[email protected] Francisco González Vidal ([email protected])[email protected]
13
14 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 14 A Backup Material Procedures I: Initial user attachment
15 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 15 A Backup Material Procedures II: Fast re-authentication
16 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 16 A Backup Material Procedures III: Full re-authentication
17 TELEFÓNICA I+D © 2008 Telefónica Investigación y Desarrollo, S.A. Unipersonal 17 A Backup Material Procedures IV: User disconnection