Hi,
I am thinking of locking the user hardphone MAC Address onto Layer 2 Switch level. This way even if the user move around their phone, it will be blocked. The disadvantage is that it will create opreration nightmare and will only work in ETTx environment. In a broadband wireless environment, there may be no layer 2 switch in between the network and subsriber.
There are 2 categories of subscribers. One is only want to use their home phone just like what the legacy voice network do. They won't bother to know about username/password. (For example illiterate elderly citizen). I must cater for these kind of users. Yet provide a secure environment for them.
Another is subscribers who want to have more flexibility. They may have hardphone, softphone, pda, notebook who can logon everywhere in the on-net network. These users may have more than one phone number to their home per user account. These users will have to be reseponsile for their username/password.
I am looking for all possibbilities and limitations there is before drawing any implementation plan.
So far, my testing is working well. SER, Cisco 7960, ATA186, Cisco Voice Gateway, Softphone/IPAQ w/WLAN, MSN Messenger, etc
Thanks
SSng
-----Original Message----- From: Jan Janak [mailto:jan@iptel.org] Sent: Tuesday, March 11, 2003 7:30 PM To: Ng, Soo Sim Cc: Jiri Kuthan; serusers@lists.iptel.org Subject: Re: [Serusers] multiple registration on one user login
Hello,
do you still need such a restriction ?
Jan.
On 10-03 11:12, Ng, Soo Sim wrote:
Hello,
On 12-03 07:22, Ng, Soo Sim wrote:
It will be a problem ss long as user's credentials are stored in the phone (as opposed to PSTN where in fact the credentials is the phone line that the phone is connected to). Maybe you can use MAC address to lock your phone to a particular location, but that depends on type of the network used.
If your users are able to type phone numbers, they should be also able to type a simple numeric password and unlock the phone upon startup.
If they are not able to type such a simple password, then you can limit amount of money they can spend per day and allow emergency calls only if they exceed the amount.
But I admit that's not nice. If anybody steals your cell phone, you have the same problem unless you lock it by password.
If you have access to firmware of your phones, maybe you can detect that the network cable was pulled out and require password only in this case.
regards, Jan.
-
Jan Janak -
Ng, Soo Sim