UM-Labs invest in R&D to maintain end to end Cyber Security and in this we fully support iniatives from industry standards bodies such as WebRTC.
WebRTC enables browsers, connecting to a suitably constructed web page to make and receive voice and video calls. Calls are established directly from the browser, with no need to pre-install an application. WebRTC is fully supported in the Chrome, Firefox and Opera browsers and runs on both iOS and Android mobile devices.
WebRTC provides secure communication, as all connections are encrypted. However the WebRTC protocols and its security model do not lend it to compliant enterprise use. There are several reasons for this.
- WebRTC implements a number of different protocols, while these include SIP which is widely implemented in commercial VoIP and UC products; the WebRTC implementation is not directly compatible with the SIP implementations in those commercial products.
- The security in WebRTC prevents call recording for compliance and legal intercept. This means that WebRTC cannot be used where compliance regulations comply.
- WebRTC does not mandate the use of authentication; calls may be made without identifying or authenticating the user. This makes it difficult to link WebRTC with corporate user databases or to use it where there is a requirement to authenticate users before providing access to communication services.
The UM Labs SSPaaS includes a WebRTC SDN application interface (Rest API). This enables WebRTC to be used as a component in any corporate UC deployment and to connect to any real-time communication IPPBX/ UC service, either on premise in a private cloud or in a pubic cloud based service. The UM Labs WebRTC API provides the following functionality:
- A simple to use web interface to authenticate connections from any WebRTC compatible browser.
- Once authenticated, the web interface provides access to an authenticated contact list enabling a WebRTC browser to make real-time communication actions such as audio and video calls to VoIP and UC end-points defined from the authenticated contact list.
- As in many UC implmentations the authentication with the user dB is crucial for Cyber security and as in Skype for Business, the UM-Labs SSPaaS is fully interoperational with Active Directory (AD).
- The WebRTC API accepts WebRTC calls from an authenticated WebRTC browser and forwards those calls to any SIP/IP based system, such as IPPBX, UC or IOT endpoints.
- Calls from SIP/IP based systems are forwarded from the WebRTC API to an authenticated WebRTC browser.