TITAN.IUM Ut-Proxy Subscriber Self-Administration

The NetNumber Ut-Proxy is a next-generation Subscriber Self Administration (SSA) solution that is part of the NetNumber TITAN.IUM Container-Native Framework architecture. To authenticate Ut messages, Ut-Proxy is deployed to take this authentication task for the AS, and the Generic Bootstrapping Authentication (GBA) is applied to avoid provisioning an additional shared secret between UE and network. As a result, the Ut messages can be authenticated in any access network with the existing shared secret between the UE and operator. This is also applicable for authentication of any HTTP-based traffic, e.g. in IoT deployments, as long as the IoT devices can support GBA-based authentication. For devices not supporting GBA based authentication, NetNumber Ut-Proxy can also use native HTTP Digest defined in RFC2617 to authenticate the devices.

NetNumber Ut-Proxy consists of the two functional blocks of the GBA solution: the Bootstrapping Server Function (BSF) and the Authentication Proxy (AP) acting as a combination of a Network Application Function (NAF) and reverse HTTP proxy. One or both functions can be simultaneously activated in the same TITAN Edge. BSF is deployed in the home PLMN and utilizes the Home Subscriber Server (HSS) as a subscriber profile repository (HSS only) and authentication center (AuC). The AP is optimized for the routing of Ut/XCAP requests from the UE towards the IMS application servers and can be deployed in the home or visited PLMN.