@techreport{wing-session-auth-00, number = {draft-wing-session-auth-00}, type = {Internet-Draft}, institution = {Internet Engineering Task Force}, publisher = {Internet Engineering Task Force}, note = {Work in Progress}, url = {https://datatracker.ietf.org/doc/draft-wing-session-auth/00/}, author = {Dan Wing}, title = {{Media Session Authorization}}, pagetotal = 15, year = 2006, month = feb, day = 1, abstract = {In many VoIP networks today, firewalls and session border controllers are used at the edge of an administrative domain to allow authorized UDP media flows to enter or leave the network. This document introduces a new mechanism to authorize a UDP media flow. This mechanism works with encrypted hop-by-hop signaling, end-to-end authenticated signaling, and multihomed networks. The media authorization is performed using an Interactive Connectivity Establishment-capable endpoint and a calling signaling device that authorizes a firewall to permit a flow.}, }