19th November 2009. New Delhi

• Importance of Security in VoIP

  • VoIP, for long, has been termed as a cheap and unsecure mode of communication whereby the voice packets are traversed through public internet. There is control over the packets flow and hence highly unsecure.
  • Unsecure communication never get it’s due place in serious business environment and hence VoIP is never treated as a genuine secure way of conversation about sensitive matters.
  • Along with voice quality restrictions, this is another main reason for hindrance in VoIP growth among serious enterprises and individuals.

   Possible Solutions

  • There are 2 prominent solutions to this security problem:
    • First is VPN Tunneling being implemented in client side devices plus client side PC softphones & Mobile Softphones.
    • Second, and the rarely present, solution is “Encryption/Decryption” of VoIP packets.

   VPN Tunneling Explained

  • The client creates a dedicated secure connection with the server and then start sending data through this secure dedicated channel.
  • The protocol followed between client & server is a declared and known protocol like with OpenVPN, Microsoft PPTP etc.

   Encryption/Decryption Explained (Ascent Telecom Solution)

  • The client encrypts the data (both signaling & RTP) before sending them over internet.
  • The encryption of data is done through a proprietary logic & algorithm that is only known to the developer of the encryption/decryption
  • The data then is sent to the server where the same algorithm is used to decrypt the data and sent it across to the SIP server

   Benefits & Disadvantages of Encryption/Decryption over Tunneling

  • Since, tunneling uses standard protocol hence it can be easily detected by any firewall.
  • Because of easy detection the tunnel can be blocked or stopped at any level (say ISP)
  • As VPN tunneling is invoked by independent programs (like softphones), most of the times, many PC firewalls do not detect and authorize this. Some VPNs tunneling enabled softphones use more than one protocols such as pptp and more than one ports are used. These ports are most of the times blocked by ADSL routers. Hence, tunneling based softphones create quite a few problem behind firewall functioning.
  • Encryption/Decryption solves all these issues and make the conversation work seamlessly and make it work in all these problematic conditions as well.
  • Since, the server side component of Encryption/Decryption is also developed and handled by the vendor, hence, the load balancing can be done effectively in case of Encryption/Decryption. Moreover, since the Encryption server is SIP Protocol sensitive, load balancing can be done on SIP Dialog basis. That means server can remember which message was sent to which server.
  • Same holds true for load distribution or load balancing as well, whereby, the load handling is done much more efficiently in case of Encryption/Decryption
  • Voice communication is far more secure in case of encryption./decryption because the algorithm is proprietary and hackers are completely unaware of it. Since, standard protocols are followed in tunneling hence the cracks for the same are also well known.

  As encryption server gives control over each data packet also, compression algorithms can be easily used such as RFC 2508.

   

About Ascent
Founded in year 2000, we are a New Delhi, India based Softphone development organization that specializes in offering “Private Labeled Secured Voice Quality Enhanced Softphones” to the “Service Providers” globally. Our decade long experience in VoIP & telecom domain enables us to delivery proven, stable, robust & flexible products that fit the varied requirements of our potential customers (read service providers). Our softphone products work on range of operating systems in varied devices: All Windows versions, Symbian operating systems, Windows Mobile operating systems. Our Mobile Softphones run on varied range of handset & operating system vendors: Symbian, Nokia, Windows Mobile, HTC, Samsung, LG, Sony Ericsson etc. Our softphones are highly interoperable with any standard Softswitch, works behind all NAT & firewalls with the use of our Encryption/Decryption technology. Our Encryption/Decryption technology make sure that our softphone works in all the regions where the service providers may block SIP ports to halt the competitive traffic or for any other reason. Encryption/Decryption have been embedded in our both PC Softphone as well as our Mobile Softphone.

Please send your comments, feedback & suggestions to media@ascenttelecom.com