No abstract

We demonstrate a prototype of a mobile phone based authentication service that can easily be used by home appliance users. The system employs the mobile phone's strong user identification capabilities such as UIMs, device identifiers or digital certificates to authenticate users over the mobile phone network while services are delivered to their appliances via the Internet. The authentication method is targeted to be used on home appliances such as digital televisions with web browsers which do not have rich interfaces. Therefore it is designed not to require users to enter any user information or to install any hardware and/or software into the appliance. This is achieved by binding a service session on the Internet and mobile network session using a barcode scanner on a mobile phone terminal. The prototype also provides an alternative method for mobile phone terminals which does not have a barcode scanner function to complement user availability.

We have developed a new on-demand VPN system that works over a managed SIP network such as the Next-Generation Network (NGN). The system achieves a stable broadband VPN connection between two home networks in an easy-to-use manner by using SIP for session management. The system uses telephone numbers, QoS management, and packet-filtering capabilities that are provided by the NGN. In this paper, we describe the system and focus on how IKEv2 and IPsec, with a slight extension to the port-number handling, can be adapted to an NGN that has NATor 5-tuple-based packet filtering within the network.