You are now in phase 1 - IT-Security.

Motivation

The eRoaming Platform is accessed by roaming partners. Besides the users who access the user interface of the platform, there are backend systems which communicate with the platform in automated ways via Web Service calls.

The eRoaming Platform, called , is operated by Hubject. Roaming partners are operating their systems separately. Communication between the HBS and the Roaming partners use standard internet . Connections need to be secure to achieve the following information security:

• Confidentiality - messages can only be read by intended recipients.
• Integrity - altering of messages during transmission (deliberately or by technical errors) must be detected.
• Authenticity - messages must be attributable to a unique sender. Sender must not be able to retract the transmission of the message.

IT Security Mechanisms

IP Whitelisting

Incoming connections of roaming partner backends are sent via the internet to the HBS. Access is only possible if your IP address is whitelisted. Outgoing HBS connections are sent directly to partner backend systems passing their firewall in case they have one

HTTPS & Certificates

Web Services transmission uses HTTPS, the SSL/TLS secured HTTP variant. The SSL tunnel guarantees information security, including: confidentiality via encryption, integrity via signed checksums and authenticity via authentication using digital signatures and certificates.

Please continue with whitelisting of the IP addresses.