IP Multimedia Subsystem (IMS) media plane security
The present document presents IMS media plane security for RTP and MSRP based media, IMS data channels (i.e., SCTP over DTLS) as well as security for BFCP as used in IMS conferencing. The security mechanisms are designed to meet the following three main objectives:
1) to provide security for media usable across all access networks
2) to provide an end-to-end (e2e) media security solution for RTP and data channel-based media to satisfy major user categories
3) to provide end-to-end (e2e) media security for important user groups like enterprises, National Security and Public Safety (NSPS) organizations and different government authorities who may have weaker trust in the inherent IMS security and/or may desire to provide their own key management service.
The media plane security for RTP based media is based on the well-established protocol SRTP. Key management solutions for SRTP are defined in this specification.
The media plane security for MSRP, used in session-based messaging, is based on TLS. TLS is also used to protect BFCP. Key management solutions for MSRP and BFCP security are defined in the present document. The media plane security for IMS data channels, i.e., SCTP over DTLS, is based on DTLS.
Two normative Annexes to the present document address IMS media plane security for immediate messaging and conferencing, respectively. The media plane security for session-based messaging is addressed in the main body of this specification.