Handling of identities in a trust domain of an IP network

A method, comprising:

• receiving a session initiation protocol request from a first session initiation protocol proxy;
• determining whether the session initiation protocol request was received via transport layer security;
• when the session initiation protocol request was received via the transport layer security,
• requesting a certificate from the first session initiation protocol proxy;
• receiving the certificate;
• verifying, during the establishment of a transport layer security connection, the certificate and a trustworthiness of a network of the first session initiation protocol proxy, the trustworthiness verified when the transport layer security is used to provide the received session initiation protocol request;
• retaining privacy information when the certificate and the trustworthiness of the network is verified;
• when at least one of the transport layer security is not supported, the certificate is not verified, and the trustworthiness of the network is not verified,
• removing the privacy information;
• and
• responding to the session initiation protocol request.

An apparatus, comprising:

• an establisher configured to establish a transport layer security connection from a first session initiation protocol proxy to a hop of a next session initiation protocol proxy, wherein the first session initiation protocol proxy is at an internet protocol multimedia core network system, and the next session initiation protocol proxy is at a network comprising a non-internet protocol multimedia core network system;
• a determiner configured to determine whether transport layer security is supported in the hop to the next session initiation protocol proxy;
• a requester configured to request a certificate from the next session initiation protocol proxy;
• a receiver configured to receive the certificate;
• a verifier configured to verify, during the establishment of the transport layer security connection, the certificate and a trustworthiness of the network of the next session initiation protocol proxy, wherein the determiner determines that the transport layer security is supported to the next session initiation protocol proxy, when establishing the transport layer security connection;
• and
• a forwarder configured to forward a session initiation protocol request,
• wherein the apparatus is configured to retain privacy information when at least one of the certificate is verified, the trustworthiness of the network is verified, and the transport layer security is supported, and wherein the apparatus is further configured to remove the privacy information when at least one of the transport layer security is not supported, the certificate is not verified, and the trustworthiness of the network is not verified, and wherein the apparatus comprises at least one processor.

A system, comprising:

• a transport layer security connection establisher configured to establish a transport layer security connection to a hop of a next session initiation protocol proxy from a first session initiation protocol proxy;
• a transport layer security support analyzer configured to determine whether transport layer security is supported in the hop to the next session initiation protocol proxy;
• a verification module configured to request a certificate from the next session initiation protocol proxy, receive the certificate and verify, during the establishment of the transport layer security connection, the certificate and a trustworthiness of a network of the next session initiation protocol proxy, wherein the determination of whether the transport layer security is supported to the next hop occurs, when establishing the transport layer security connection;
• and
• a session initiation protocol request handler configured to forward a session initiation protocol request over the transport layer security connection,
• wherein the system is configured to retain privacy information when at least one of the certificate is verified, the trustworthiness of the network is verified, and the transport layer security is supported, and wherein the system is further configured to remove the privacy information when at least one of the transport layer security is not supported, the certificate is not verified, and the trustworthiness of the network is not verified, and wherein the system comprises at least one processor.

A computer program embodied on a non-transitory computer readable medium, said computer program configured to control a processor to perform operations comprising:

• determining whether transport layer security is supported in a hop to a next session initiation protocol proxy from a first session initiation protocol proxy;
• when the transport layer security is supported,
• establishing a transport layer security connection to the hop to the next session initiation protocol proxy;
• requesting a certificate from the next session initiation protocol proxy;
• receiving the certificate;
• verifying, during the establishment of the transport security connection, the certificate and a trustworthiness of a network of the next session initiation protocol proxy, wherein the determining determines that the transport layer security is supported to the next session initiation protocol proxy, when establishing the transport layer security connection;
• retaining privacy information, when the certificate and the trustworthiness of the network is verified;
• when at least one of the transport layer security is not supported, the certificate is not verified, and the trustworthiness of the network is not verified,
• removing the privacy information;
• and
• forwarding a session initiation protocol request.

A computer program embodied on a non-transitory computer readable medium, said computer program configured to control a processor to perform operations comprising:

• determining whether a first session initiation protocol proxy belongs to a trusted network for purposes of handling user identity and privacy;
• receiving a session initiation protocol request from the first session initiation protocol proxy at a next session initiation protocol proxy;
• determining whether the session initiation protocol request was received via transport layer security;
• when the session initiation protocol request was received via the transport layer security,
• requesting a certificate from the first session initiation protocol proxy;
• receiving the certificate;
• verifying, during the establishment of a transport layer security connection, the certificate and a trustworthiness of a network of the first session initiation protocol proxy, wherein the determining determines that the transport layer security is supported to the next session initiation protocol proxy, when establishing the transport layer security connection;
• retaining privacy information when the certificate and the trustworthiness of the network is verified;
• when at least one of the transport layer security is not supported, the certificate is not verified, and the trustworthiness of the network is not verified,
• removing the privacy information;
• and
• responding to the session initiation protocol request.