Tls For Sip Signaling And Provisioning - Algo 8190S User Manual

TLS for SIP Signaling and Provisioning

Algo devices support Transport Layer Security (TLS). This feature adds security by
ensuring that Algo products can trust the hosted SIP server. This is useful for when third-
party devices or attackers may try to intercept, replicate, or alter Algo products, and try to
connect to the server. TLS protocol will ensure that third parties cannot read/modify any
actual data. Previously security was less of a concern because phone systems were on
isolated networks, but hosted services are becoming increasingly more common. Using a
hosted SIP service requires traffic to be sent over the public internet and thus much more
susceptible to attacks. Signed certificates are an important piece in the Algo device's
operation, to ensure the security, integrity, and privacy of its communication. Algo
components that use TLS are Provisioning and SIP Signaling.
These Algo devices each come pre-loaded with certificates from a list of trusted certificate
authorities (CA), which are installed in the hardware at the time of manufacture. Note
these pre-installed trusted certificates are not visible to users and are separate from the
'certs' folder.
The TLS handshake happens to make sure that the client and server can trust each other,
and once that trust is established, the two parties can freely send encrypted data and
decrypt any data that they receive. After the TLS handshake process is complete, a TLS
session is established, and the server and client can then exchange messages that are
symmetrically encrypted with shared (pre-master) secret key.
Document 90-00105
03/09/2020
Page 15
Algo Communication Products Ltd
4500 Beedie St Burnaby BC Canada V5J 5L2
www.algosolutions.com
8190S SIP Classroom Speaker with Strobe FW 3.1
support@algosolutions.com
(604) 454-3792