You are now in phase 1 - IT-Security.

Motivation

The eRoaming Platform is accessed by roaming partners. Besides the users who access the user interface of the platform, there are backend systems which communicate with the platform in automated ways via Web Service calls.

The eRoaming Platform, called Hubject Brokering System (HBS), is operated by Hubject. Roaming partners are operating their systems separately. Communication between the HBS and Roaming partners use standard internet. Connections need to be secure to achieve the following information security:

• Confidentiality - messages can only be read by intended recipients.
• Integrity - altering of messages during transmission (deliberately or by technical errors) must be detected.
• Authenticity - messages must be attributable to a unique sender. The Sender must not be able to retract the transmission of the message.

IT Security Mechanisms

IP Whitelisting

Incoming connections of roaming partner backends are sent via the internet to the HBS. Access is only possible if your IP address is whitelisted. Outgoing HBS connections are sent directly to the partner backend systems passing your firewall in case you have one.

HTTPS & Certificates

Web Services transmission uses HTTPS, the SSL/TLS secured HTTP variant. The SSL tunnel guarantees information security, including: confidentiality via encryption, integrity via signed checksums and authenticity via authentication using digital signatures and certificates.

Please continue with whitelisting of the IP addresses.