Abstract

SIP-Based IP Telephony offers the promise of rapid service creation and dynamic deployment. SIP Services are fragments of code that are triggered by SIP Messages and can perform actions on behalf of registered users. We present Programmable Active Services for SIP (PASS), a technique that uses Java ™ 2 Security and Java Bytecode re-writing to allow un-trusted services to run on SIP Signaling Servers. Our technique allows users to write and upload services as Java classes with no a priori constraints on the structure or content of the programs. This generality permits users to leverage the extensive Java libraries and to program new SIP servicesin familiar environments. We define an extended, SIP specific, Java security model that restricts the behavior of the executing SIP service and that constrains the computational resources that it consumes. Internet telephony initially had the appeal of being a low cost way of making voice phone calls. Users were willing to tolerate degraded quality or reduced function for lower cost. However, with cost differentials rapidly disappearing, the driving force for IP Telephony is evolving toward rapid service deployment – especially 3 rd party service creation and user customizable services. In this paper we explore a technique that enables un-trusted users to upload safe

Citations