IP Multimedia Subsystem Services Research Articles

Distributed intrusion detection scheme for next generation networks

IP Multimedia Subsystem (IMS) is a next generation network that provides the hypermedia services as data, voice and video to users. Due to high level requirements for IMS services, new kinds of network attacks are endlessly emerging. Thus, it is of paramount importance to protect the networks from attacks. Consequently, the Intrusion Detection Systems (IDS) are quickly becoming a popular requirement in building a network security infrastructure. Securing service and signalization is a vital feature in the IMS network. Signaling is generally based on Session Initiation Protocol (SIP) which offers numerous challenges regarding security which causes issues in IMS network. This work presents a study of SIP protocol and discovers the critical security vulnerabilities in the course of registration phase. We focused on DDoS attacks on IMS server using SIP particularly with REGISTER message and proposed a scheme based on multi agent systems for intrusion detection which takes the advantage of the distributed paradigm to implement an efficient distributed system, as well as the integration of existing techniques, i.e., the well-known IDS SNORT.

EVALUATION OF SERVICES QUALITY IN IMS

The main stages of the historical development of telecommunication networks are shown. It is noted that today the most common concepts are NGN (Next Generation Network), supporting the functionality of Triple-Play Services (triple services – voice, video and data transmission), as well as IMS (IP Multimedia Subsystem), which combines cellular technology and landline communications. They are able to provide a wide range of services: basic, additional, intelligent. In addition, IMS is able to provide mobile services. The IMS architecture layers are presented – transport layer, control layer; layer of service and application servers. Particular attention is paid to the layer of service and application servers. Based on the analysis of ITU recommendations, the main telecommunication services quality indexes are determined, namely, the time of service provision, the length of the queue that the service request falls into to wait for service on the server, and the probability of refusing to provide services. Based on the proposed mathematical models of the NGN intelligent superstructure, analytical expressions are presented for calculating the quality indexes of intelligent services in NGN for one type of service and for K types of services, taking into account the self-similarity of traffic, and without taking into account. To evaluate the quality of services in IMS, it is proposed to use the approaches of queuing theory and tensor analysis. Tensor analysis offers a mathematical apparatus for transforming coordinate systems, considering IMS as a set of geometric objects whose projections are different in different coordinate systems, but the physical properties of the objects themselves do not change. Expressions are proposed that make it possible to calculate the following QoS indexes in IMS: average queue length, average residence time of an application in the system for all types of services in IMS. It is considered that the incoming traffic is the simplest. Further development of the work is to take into account the self-similar nature of traffic, which is created by the flow of requests for services that come to IMS, as well as the limitations of the server buffer, which will allow a more accurate assessment of the quality of services in IMS.

An IP Multimedia Subsystem Services Proxy Gateway Based on a JAVA Dynamic Module System

By virtue of the rapid development of the Information and Communication Technology (ICT), people have owned various devices connected to the Internet to enjoy various emerging application services, such as multimedia related services. IP Multimedia Subsystem (IMS) is the integration platform for multimedia application services and provides a rich feature set of converged services in the Next Generation Network (NGN). IMS services are accessed by a user anytime and anywhere through his/her personal self IMS device, e.g., mobile device, equipped with a Universal Subscriber Identity Module (USIM) card. People have owned various devices connected to the Internet at homes or offices. However, some devices can not access IMS services without USIM cards embedded, which is called non-IMS devices. People wish that more devices without USIM cards embedded should be connected to the Internet on which IMS services are accessed in addition to the mobile devices equipped with USIM cards. Accordingly, we propose an Open Service Gateway Initiative (OSGi)-based IMS service gateway, in which OSGi technology is the dynamic module system for JAVA. The proposed gateway is authorized by a personal self IMS device such that IMS services are accessed by non-IMS devices, in this paper. Moreover, these non-IMS devices rely on different networks to access technologies and network protocols and the IMS service gateway proposed here adopts the OSGi framework for no problem of integration.

IMS 서비스망 연동을 위한 FMC 컨트롤러 구현

Work environments within the firm with a concept of mobile office is growing divided into two sections. It's Wi-Fi FMC(Fixed Mobile Convergence) field Which are implemented in a telephone service available from existing fixed-line service in the center of the smart phones and the EMS(Enterprise Mobility Service) field to make people will be able to handle PC the center of the information system within an enterprise using a smart phone instead of terminal facility connects to a system in the workplace and external. This paper developed FMC controller to allow execution IMS(IP Multi-Media Subsystem) services to complement the issues of the FMC corporation, telephony service associated. The controller includes FMC automatic enrollment services, voice quality enhancement of the mobile phone, anywhere within the firm on his mobile phone calls can provide mobility and is also implemented FMC LCR function that use status information from mobile soft-phone within the IP-PBX.

중·소형 IMS 코어 메인 시스템 구현

Service platform which can offer various multimedia communication as the video, audio, voice and data is IMS(IP Multi-Media Subsystem). It is effective in the company is introducing only such convergence IMS services to be required to provide various multimedia services at the lowest cost and existing communication environment while keeping the maximum Therefore, in this study, we had developed IMS 코어 main system that not more than 1,000 employees of companies can effectively establish IMS solutions. This system is located at the middle between IMS terminal and CSCF(Call Session Control Function) in line with IMS services and provides CSCF in response to the IMS terminal and IMS terminal in response to the CSCF. As well, corded telephone and SIP phone which were used as terminal is linked with gateway.

Design of a Novel Architecture Signaling Network to Provide Internet Multimedia Subsystem Services through Aeronautical Passenger Communication

This article describes a novel architecture signaling network so that an IP Multimedia Subsystem (IMS) user, flying in an aircraft, be able to register with his IMS network of origin and have access to personal services and multimedia, through a Wide-Band Code Division Multiple Access (W-CDMA) link. The proposed architecture integrates the Session Initialization Protocol (SIP), the Network Mobility Basic Support (NEMO BS) protocol and the Mobile Internet Protocol (MIPv6) to enable the usage of IMS services by passenger on board an aircraft, as a type of Aeronautical Passenger Communication (APC) services. In this novel architecture, NEMO and MIPv6 protocols are responsible for the mobility management of smartphones and user notebook and the SIP protocol is responsible for the register and the management of sessions of an IMS user. This novel architecture enables an Air Communication Service Provider (ACSP) be able to supply to an on-board passenger (The IMS user) some APC services through an Universal Mobile Telecommunication System (UMTS). The simulation results indicate the accuracy of the proposed architecture into aeronautical scenarios.

Analyzing Threefold Schemes for Enhancing Communication Channel Efficiencies Using IP Multimedia Server–Client Systems for LTE Networks

In 3G, the server platform of IP multimedia subsystem (IMS) offers multimedia service to the multimedia clients through the exchange of authenticated key agreement (AKA) scheme. Since the IMS service is transmitted over public networks, the server and client of IMS shares a common session-key via the execution of AKA scheme to secure the communication service over a public network. Though there are some identical steps involved in the key authentication Scheme of IMS, the communication efficiencies of IMS server and client are still conciliating. Besides, it is having the issues of insecurity and session compatibility dealt with the real time transport protocol (RTP). To resolve the issues of IMS, this paper proposes three novel schemes: (1) The first scheme is multimedia server---client authentication scheme and its purpose is to mitigate the packet congestion on the networks; (2) The second scheme is traffic on background and its purpose is to analyze the signal congestion, bandwidth consumption and network utilization of the system; and (3) The last one is fault detection index and its purpose is to prevent the SIP vulnerabilities, like bye and invite. In addition, we integrate the proposed and existing authentication schemes, such as EPS-AKA, AP-AKA, UMTS-AKA, X-AKA, S-AKA and so on., in the IMS server and client environments to testify the metrics, namely round trip time, call response time, packet generation, flow analysis, RTP session, network utilization, throughput analysis, bandwidth utilization and flooding attack detection realistically.

Two Exploring Experiments on IMS Service Based on SIP AS

The IP Multimedia Subsystem (IMS) has been deployed worldwide for several years, but we are still confused about what we can do with IMS. Sponsored by Beijing Education Commission, we did some exploring study on IMS Service and also designed two lab experiments to help students to learn about the IMS. We focus on the development of two IMS services, Chat Room and Presence Service, on an IMS SIP Application Server. The architecture and the detailed design of the services are presented. These two experiments have been applied to the practical training course for undergraduate students.

CATMISS: context-aware transparent mobility for IMS services

The IP Multimedia Subsystem (IMS) is considered as the common platform for providing a unified session control on top of various access network technologies for multimedia applications. At the same time, we are witnessing how wireless technologies become an integral part of our daily life, due to an increasing number of mobile multi-interface devices and the proliferation of wireless access networks. In this context the availability of transparent mobility management mechanisms is a key element to enhance user’s quality of experience. On the other hand, context-awareness is a vital ingredient to allow mobile devices to make appropriate and timely mobility decisions. The benefits of using diverse context information (e.g., about the user, the service and the network) to manage mobility are twofold. First, the richer information is available, the more likely an intelligent decision can be taken. Second, it allows the network to assist the terminal to take mobility decisions, even up to the point of automatically initiating a mobility procedure if according to the context and user preferences this improves the user’s quality of experience. In this paper we propose CATMISS, a solution to support context-aware mobility in IMS services. The solution is based on SIP signalling and makes mobility transparent for communication peers of mobile terminals. Two types of mobility are supported: a terminal changing of access network and a multimedia session being transferred from one terminal to another. The paper also describes the implementation of the solution and its deployment in an experimental platform. Experiments in this platform, with IPTV and videoconference services, are used to validate the proposal.

Policy and Charging Control for Virtual IMS Client

In its latest releases, the IP multimedia subsystem (IMS) service model provisions Quality of Service (QoS) and enforces charging through its policy and charging control (PCC) architecture. By exploiting the intrinsic segregation of the signalling and media planes that the IMS service model offers, a virtual IMS client could be developed that simplifies terminal device implementation by offloading signalling and session management tasks to a remote server. In this paper, we study how the IMS/PCC architecture can be deployed in conjunction with a virtual IMS client. Although a virtual IMS client assigns the signalling tasks (accomplished through session initiation protocol and session description protocol) to a remote server, information related to QoS should be propagated back to the access network and also the end user's terminal device. Therefore, designing a virtual IMS client that only deals with the media plane is challenging. In this paper, we propose a PCC architecture for the virtual IMS client that keeps the end user's terminal as simple as possible while providing the necessary functions of the IMS/PCC architecture. Since QoS provisioning is access network specific, we explore the proposed architecture for two predominant networks access methods: UMTS from 3GPP and WLAN from IP-based access.

An intrusion detection and prevention system for IMS and VoIP services

The Voice Over IP (VoIP) environments and the most contemporary ones such as the IP Multimedia Subsystem (IMS) are deployed in order to provide cheap and at the same time high quality services to t...

A linear chained approach for service invocation in IP Multimedia Subsystem

IP Multimedia Subsystem (IMS) is considered to provide multimedia services to users through an IP-based control plane. The current IMS service invocation mechanism, however, requires the Serving-Call Session Control Function (S-CSCF) invokes each Application Server (AS) sequentially to perform service subscription profile, which results in the heavy load of the S-CSCF and the long session set-up delay. To solve this issue, this paper proposes a linear chained service invocation mechanism to invoke each AS consecutively. By checking all the initial Filter Criteria (iFC) one-time and adding the addresses of all involved ASs to the “Route” header, this new approach enables multiple services to be invoked as a linear chain during a session. We model the service invocation mechanisms through Jackson networks, which are validated through simulations. The analytic results verify that the linear chained service invocation mechanism can effectively reduce session set-up delay of the service layer and decrease the load level of the S-CSCF.

A Fast IMS Service Recovery Mechanism for the Handover Over MIH-Capable Heterogeneous Networks

IP multimedia subsystem (IMS) is the core multimedia network in the next generation all-IP environment. It provides access independence for multimedia applications across fixed and mobile access networks. When a roaming IMS subscriber connects to IMS through mobile access networks, handover becomes a critical issue; this needs to be addressed. Since IMS concerns application layer handover for session mobility, the application layer handover takes a long time for recovering the suspended sessions according to the standard IMS session reestablishment procedure. This introduces noticeable service interruption to end users and cannot be tolerated for real-time applications. In this paper we propose a fast IMS service recovery mechanism to shorten the service recovery latency by combining the IEEE 802.21 Media Independent Handover service and the IRTF Media-Independent Pre-Authentication frameworks. The proposed mechanism performs the necessary IMS registration and QoS re-negotiation procedures in advance of lower-layer handover. Thus it reduces the service recovery latency for suspended services. With parallel design in time, the proposed mechanism is able to shorten overall handover relevant latency as well. Technical examination shows that it is easy to deploy the proposed mechanism in current multimedia service environments.

The multimedia service session handoff method in heterogeneous wireless networks

The IP Multimedia Subsystem (IMS) can provide multimedia services between heterogeneous wireless networks. But the efficiency of the service session handoff will bring a significant impact to user experience. For the integration of heterogeneous wireless networks, we propose a Session Initiation Protocol (SIP) based multimedia service session handoff method named MS²HM. To reduce the handoff delay between heterogeneous wireless networks, the MS²HM uses the methods of advance registration and old-new address temporary matching. We modelled the node processing delay and network transmission delay, and analyse the total delay and the packet loss rate of the MS²HM. Specially, this paper contrastively analyses the handoff delay under different frame error control in the 3G-WLAN integrated network, and the result shows that MS²HM has lower handoff delay than the method proposed by Wedlund and Schulzrinne. The MS²HM can meet the low delay and low packet loss rate requirements of IMS service session handoff between heterogeneous wireless networks, and ensure the QoS of the IMS services.

Performance evaluation of an authentication solution for IMS services access

The IP Multimedia Subsystem (IMS) is an access-independent, IP based, service control architecture. Users' authentication to the IMS takes place through the AKA (Authentication and Key Agreement) protocol, while Generic Bootstrapping Architecture (GBA) is used to authenticate users before accessing the multimedia services over HTTP. In this paper, we focus on the performance analysis of an IMS Service Authentication solution that we proposed and that employs the Identity Based Cryptography (IBC) to personalize each user access. We carry out the implementation of this solution on top of an emulated IMS architecture and evaluate its performance through different clients' access scenarios. Performance results indicate that increase in the number of clients does not influence the average processing time and the average consumed resources of the GBA entities during the authentication. We also notice that the Bootstrapping Server Function (BSF) presents a bottleneck during the service authentication which helps in giving some guidelines for the GBA entities deployment.

Multi-domain authentication for IMS services

This article proposes a novel unified IP Multimedia Subsystem (IMS) authentication architecture that extends the scope of IMS by allowing it to offer users different IMS-based services even beyond their own domain. The architecture reduces the burden of both end users and service providers by a Single Sign-On (SSO) feature. We describe how we have implemented our proposed authentication architecture for a tentative IMS service, Movie-on-Demand (MoD), by creating SIP proxies with additional SAML and HTTP message-handling intelligence and integrating them with an open-source implementation of a full IMS environment, from client to Application Server (AS). The relation between call setup time and network latency has been mathematically modelled. The developed mathematical model is validated by deploying a simplified implementation in the public Internet and observing call setup time and delay. The proposed architecture is further extended for a generalized scenario where the identity provider (IdP) could be managed by a third-party other than the IMS core operator. The authentication architecture proposed in this paper creates opportunities for operators to build partnerships with the service providers, and thus supports the emergence of new business models.

IMS emergency services: a preliminary study

Emergency call and walkie-talkie are two services utilized in emergency situations. During Typhoon Morakot in 2009, we experienced the deficiency of emergency call service that cannot continuously track callers in real time and walkie-talkie communications where a speaker may not be granted the permission to talk. These issues can be resolved by the emergency call and push-to-talk over cellular services in IP Multimedia Subsystem. This article conducts a preliminary study on how these two services can be effectively exercised in IMS.

A Novel Scalable Architecture on Android to Cater End-2-End IMS Services to Audio Video Terminals

IP Multimedia Subsystem (IMS) known for its prominent service delivery is paving way for applications like Video Voice over IP (VVOIP) on handheld devices too. Android, a software platform from Google, pioneering in middleware and applications domain of handheld devices does not offer support for IMS services by design. Motivated by these observations, we present novel scalable architecture to cater IMS based services on Android. First, we discuss few related works to investigate and analyze the IMS and the role of SIP in IMS services. Second, we discuss few characteristics of android architecture and detail constraints associated with middleware sub-system to cater IMS services. Consequently, we describe the proposed architecture addressing inherent challenges like QoS, Extendibility and Security encountered while offering IMS based services. The architectural framework design reduces time-to-deployment by using a layered approach encompassing three layers, namely: QoE Engine, Advanced IMS Service Core (A-IMS) and Application Services Engine (ASE) . The A-IMS core is responsible to provide End-2-End efficient service delivery of IMS services like VOIP. We point out the benefits of using the ASE and generic media management and control interface (GMMCI) to ensure smooth and swift portability onto different flavors of android. Finally, we conclude by detailing some use-cases of future IMS services like Video Sharing/Video Recording in an on-going Video Telephony Call.

Challenges to Next Generation Services in IP Multimedia Subsystem

The trend of Next Generation Networks' (NGN) evolution is towards providing multiple and multimedia services to users through ubiquitous networks. The aim of IP Multimedia Subsystem (IMS) is to integrate mobile communication networks and computer networks. The IMS plays an important role in NGN services, which can be achieved by heterogeneous networks and different access technologies. IMS can be used to manage all service related issues such as Quality of Service (QoS), Charging, Access Control, User and Services Management. Nowadays, internet technology is changing with each passing day. New technologies yield new impact to IMS. In this paper, we perform a survey of IMS and discuss the different impacts of new technologies on IMS such as P2P, SCIM, Web Service and its security issues.

INTEGRATING IDENTITY-BASED CRYPTOGRAPHY IN IMS SERVICE AUTHENTICATION

Nowadays, the IP Multimedia Subsystem (IMS) is a promising research field. Many ongoing works related to the security and the performances of its employment are presented to the research community. Although, the security and data privacy aspects are very important in the IMS global objectives, they observe little attention so far. Secure access to multimedia services is based on SIP and HTTP digest on top of IMS architecture. The standard deploys AKA-MD5 for the terminal authentication. The third Generation Partnership Project (3GPP) provided Generic Bootstrapping Architecture (GBA) to authenticate the subscriber before accessing multimedia services over HTTP. In this paper, we propose a new IMS Service Authentication scheme using Identity Based cryptography (IBC). This new scheme will lead to better performances when there are simultaneous authentication requests using Identity-based Batch Verification. We analyzed the security of our new protocol and we presented a performance evaluation of its cryptographic operations.