Diameter
Site: | Saylor Academy |
Course: | CS406: Information Security |
Book: | Diameter |
Printed by: | Guest user |
Date: | Saturday, September 7, 2024, 7:54 PM |
Description
Read this article about the history of Diameter and why it was developed. What preceded Diameter as an authentication protocol? While you do not need to understand how Diameter authenticates, you should have a general idea of its authentication process.
Abstract
The DIAMETER protocol is designed to provide an Authentication, Authorization and Accounting (AAA) framework for applications such as network access or IP mobility and also intended to work in local Authentication, Authorization & Accounting and roaming situations.The Diameter protocol was initially developed by the Internet Engineering Task Force (IETF) as an Authentication, Authorization, and Accounting (AAA) framework Diameter was further embraced by the Third Generation Partnership Project (3GPP) as the key protocol for AAA and mobility management in 3G networks.
The DIAMETER protocol consists of a base protocol, defined in [RFC 3588] September 2003 and it is obsolete by [RFC 6733] October 2012, and set of applications (also called extension of the base protocol). The base protocol must be supported by all applications. The base protocol must be supported by all applications.
Keywords: DIAMETER, RADIUS, AAA, IMS, SIP
Source: V. A. Sowmya, Nagarathna, and Ajay Satyanarayana, http://52.172.159.94/index.php/ijird/article/view/36576 This work is licensed under a Creative Commons Attribution-NonCommercial 3.0 License.
1.Introduction
DIAMETER is the newest AAA protocol developed in 2001 from the older AAA protocol RADIUS (Remote Access Dial-In User Service) by the Internet Engineering Task Force (IETF) as an Authentication, Authorization, and Accounting (AAA) framework intended for applications such as remote network access and IP mobility. The DIAMETER protocol was developed to resolve the issues that RADIUS left open. In new application areas like Wireless Local Access Network (WLAN) and Voice over IP (VoIP), DIAMETER is better suited and gives better support for roaming users. DIAMETER is defined as a base protocol used in conjunction with a set of applications. The Diameter Base Protocol [RFC 6733] contains the basic functionality like reliable transport, message delivery and error handling. The Diameter applications are extensions of the basic functionalities that are tailored for a particular usage in a particular environment.
AAA Framework includes:
- Authentication is the verification of the identity of the entity.
- Authorization is the determination whether the requesting entity is allowed access to a particular resource.
- Accounting is the collecting of information about resource usage for the purpose of capacity planning, auditing, billing or cost allocation.
2.IP Multimedia Subsytem
Figure 1: architecture of IMS
IP Multimedia Subsystem or IMS is a standardized Next Generation Networking (NGN) architecture for telecom operators that want to provide mobile and fixed multimedia services. It uses a Voice-over-IP (VoIP) implementation based on a 3GPP standardized implementation of Session Initiation Protocol (SIP), and runs over the standard Internet Protocol (IP). Existing phone systems (both packet-switched and circuit-switched) are supported.
The IMS is the technology that will merge the Internet with the Cellular world. It is network enables and drives efficient converged service offerings. It is the key to delivering multimedia services with telecom-grade quality of service across fixed and mobile accesses. It creates new opportunities for operators who want to deliver attractive, easy-to-use, reliable and profitable multimedia services – including voice, pictures, text and video, or any combination of these – with existing services such as web, email, instant messaging, and videoconferencing available nearly everywhere. The IMS is based on a horizontally layered architecture, consisting of three layers, namely, Service Layer, Control Layer, and transport Layer.
(i) Service Layer comprises application and content servers to execute value-added services for the user.
(ii)Control layer comprises network control servers for managing call or session set-up, modification and release. The most important of these is the Call Session Control Function (CSCF).
(iii)Connectivity Layer comprises of routers and switches, for both the backbone and the access network Device layer consists of user terminal devices like UE (user equipment), PDA, Desktop, and Laptop which can connect to the IMS network.
Figure 2: Reference point in IMS
3.Diameter Protocol Stack Architecture
Figure 3: Architecture of Diameter Protocol Stack
The above shows the schematic of DIAMETER protocol stack architecture for application server in IP Multimedia subsystem (IMS).
- Diameter base protocol: The Diameter base protocol provides basic services to one or more applications (also called functions) that each runs in a different Diameter instance.
- Basic functionalities provided by base protocol are as follows: reliable transport, message delivery, Delivery of AVPs, Capability Negotiation, Error Notification, Accounting, and extensibility via new command codes and AVPs.
- Diameter Client API (Application programming interface): This acts as the interface between the diameter base protocol and the diameter application.
- Diameter application: Diameter application is an application specific protocol used for transfer of application specific functions and messages.
- Diameter applications are namely as follows: NASREQ, EAP, Mobile IPV4, Credit Control and other 3GPP interfaces like Cx, Dx, Sh, Ro, Rf etc
4.Implementation Of Diameter Protocol Stack
Implementation begins with the sequence of development of the diameter base protocol and as well as the corresponding required diameter application protocol.API is another important development which acts as interface between the diameter base and its corresponding diameter application protocol. DIAMETER is application layer protocol comes under TCP/IP protocol suite and it runs over reliable transport protocols, TCP (Transmission Control Protocol) and TLS (Transport Layer Security).
5.Flow Diagram
Figure 4: API Flow of Diameter Client
6.Diameter Client API
Diameter Client API is used to perform the vital operations carried out in Diameter Core
functionalities and acts as an interface for the Diameter Base Protocol and Diameter
Application.
6.1.Initialization API
Initialization API used to initialize the DIAMETER Client stack which performs in the registration of the stack with TCA, allocate the memory for the stack resources and configuration of the stack.6.2.Start Connection API
StartConnection API is used for the connection establishment between DIAMETER client and DIAMETER server which deals with the creation of transmission sockets, timers.6.3.Startsession API
StartSession API is used for the session establishment between the connected DIAMETER client and DIAMETER server which deals with the creation sessions and filling details.6.4.Sendmessage API
SendMessage API is used to send the Diameter message packet in encoded form to another Diameter Node (Diameter Server) in allotted Connection_ID and Session_ID; by creating new transaction using Transaction_ID. Flow Diagram of this API is given in Figure 4.6.5.Terminatesession API
TerminateSession API is used to terminate the session which has been established between the connected DIAMETER client and DIAMETER server which deals with the deletion of sessions and its details.6.6.Terminateconnection API
TerminateConnection API is used for the terminating the connection established between
DIAMETER client with the DIAMETER server which deals with the deletion of
transmission sockets, timers.
6.7.Uninitialization API
UnInitialization API used to uninitialize the DIAMETER Client stack which perform deregistration of the stack with TCA, de-allocate the memory allotted for the stack resources and configuration of the stack.7.Result
Snapshots of all APIs are given as follows:
7.1.Initialization Api Success
Initialization API is called with valid parameter value resulting in SUCCESS of Initialization of Stack.
Figure 5: Initialization API SUCCESS
7.2.Startconnection API SUCCESS
StartConnection API is called resulting in SUCCESS, whose pre-requisite is Initialization API which is SUCCESS; later UnInitialization is called which is SUCCESS.Figure 6: StartConnection API SUCCESS
7.3.Startsession API SUCCESS
StartSession API is SUCCESS, and its pre-requisite are Initialization API and StartConnection API is SUCCESS; later UnInitialization is called which is SUCCESS.Figure 7: StartSession API SUCCESS
7.4.Sendmessage API SUCCESS
SendMessage API is SUCCESS by sending valid Diameter message parameter, its prerequisite are Initialization API, StartConnection API and StartSession API are SUCCESS; sending CER message.Figure 8: SendMessage CER SUCCESS
Figure 9: SendMessage DWR SUCCESS
7.5.Terminatesession API SUCCESS
TerminateSession API is called resulting in SUCCESS, and its pre-requisite is Initialization API and StartConnection, StartSession API are SUCCESS; later remaining APIs are called which all are SUCCESS.Figure 10: TerminateSession API SUCCESS
7.6.Terminateconnection API SUCCESS
TerminateConnection API is called resulting in SUCCESS, and its pre-requisite is Initialization API, StartConnection and/or StartSession API are SUCCESS; later terminate the connection and sessions (if present) by TerminateConnection API and later UnInitialization is called both are SUCCESS.Figure 11: TerminateConnection API SUCCESS with TerminateSession Called before
TerminateConnection
Figure 12: TerminateConnection API SUCCESS without TerminateSession Called
before TerminateConnection
7.7.Uninitialization API SUCCESS
UnInitialization API is called (having no parameter) resulting in SUCCESS of UnInitialization of Stack by de-allocating all its resources.Figure 13: UnInitialization API SUCCESS