INTERNET DRAFT Jari Arkko Category: Standards Track Oy LM Ericsson Ab Title: draft-calhoun-diameter-accounting-00.txt Pat R. Calhoun Date: September 1999 Sun Microsystems, Inc. Pankaj Patel Convergys Corporation Glen Zorn Microsoft Corporation DIAMETER Accounting Extension Status of this Memo This document is an individual contribution for consideration by the AAA Working Group of the Internet Engineering Task Force. Comments should be submitted to the diameter@ipass.com mailing list. Distribution of this memo is unlimited. This document is an Internet-Draft and is in full conformance with all provisions of Section 10 of RFC2026. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at: http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at: http://www.ietf.org/shadow.html. Abstract The DIAMETER protocol provides Authentication and Authorization for dial-up PPP clients [2] and for Mobile-IP [3]. The ROAMOPS WG has been working on an accounting data format, called Accounting Data Interchange Format (ADIF) [10], as a method to transfer accounting Calhoun, Patel expires March 2000 [Page 1] INTERNET DRAFT September 1999 information over a wide variety of transports. This document describes how ADIF can be securely transmitted over the DIAMETER protocol. Table of Contents 1.0 Introduction 1.1 Copyright Statement 1.2 Requirements language 2.0 Command Codes 2.1 Accounting-Request 2.2 Accounting-Answer 3.0 DIAMETER AVPs 3.1 Accounting-Session-Id 3.2 Accounting-Record-Type 3.3 ADIF-Record 3.4 Accounting-Confirmation 3.5 Accounting-Digital-Signature 3.6 Accounting-Certificate 4.0 Protocol overview 4.1 Use of Accounting Certificate 5.0 IANA Considerations 6.0 Acknowledgments 7.0 References 8.0 Authors' Addresses 9.0 Full Copyright Statement 1.0 Introduction The DIAMETER protocol provides Authentication and Authorization for dial-up PPP clients [2] and for Mobile-IP [3]. The ROAMOPS WG has been working on an accounting data format, called Accounting Data Interchange Format (ADIF) [10], as a method to transfer accounting information over a wide variety of transports. This document describes how ADIF can be securely transmitted over the DIAMETER protocol. This document describes how Accounting Records can be transmitted within the DIAMETER protocol in a secure fashion, even when the messages must traverse DIAMETER proxies [1, 9]. This extension allows for both real-time and batched accounting transfers. This document introduces AVPs that are very similar to some found in the base [1] and the end-to-end security extension [9]. However, since this extension requires that the AVPs in question must have bits set which are not currently permitted in both the stated drafts, a new version of the AVP has been defined here. However, a future Calhoun, Patel expires March 2000 [Page 2] INTERNET DRAFT September 1999 version of this document may make use of the original AVPs once the [1] and [9] have been corrected. If there is interest in this extension, the impact of changing [1] and [9] must be carefully evaluated. The Extension number for this draft is five (5). This value is used in the Extension-Id Attribute value Pair (AVP) as defined in [7]. 1.1 Copyright Statement Copyright (C) The Internet Society 1999. All Rights Reserved. 1.2 Requirements language In this document, the key words "MAY", "MUST, "MUST NOT", "optional", "recommended", "SHOULD", and "SHOULD NOT", are to be interpreted as described in [6]. 2.0 Command Codes This section will define the Commands [1] for DIAMETER implementations supporting the Mobile IP extension. Command Name Command Code ----------------------------------- Accounting-Request ??? Accounting-Answer ??? 2.1 Accounting-Request Description The Accounting-Request command is sent by a DIAMETER node in order to exchange accounting information with a peer. The Accounting information is contained within an ADIF record, as described in [10]. The Accounting-request command MAY contain accounting information for more than a single session, which allows it to send batched accounting information. When the batch mode is used, the session- Id AVP [1] and the Digital-Signature AVP [6] MUST be present, and MUST have a tag of the same value as the ADIF-Record AVP. Calhoun, Patel expires March 2000 [Page 3] INTERNET DRAFT September 1999 Message Format ::= [] ( && && && && { || ::= [] ( && && { ||