SIP Call-Info Parameters for Rich Call Data

Introduction Traditional telephone network signaling protocols have long supported delivering a 'calling name' from the originating side, though in practice, the terminating side is often left to derive a name from the calling party number by consulting a local address book or an external database. SIP similarly can carry a 'display-name' in the From header field value from the originating to terminating side, though it is an unsecured field that is not commonly trusted and often replaced or ignored. The same can be considered true of information in the Call-Info header fields in SIP. To allow calling parties to initiate and called parties to receive a more comprehensive, deterministic, and extensible rich call data for incoming calls, this document describes new tokens for the SIP Call-Info header field and a corresponding "purpose" parameter. A new parameter of Call-Info designed for carrying a "reason" value. For this document and depending on the policies of the communications system, calling parties could either be considered the end user device, (e.g. a SIP UA), or as a network service as part of a telephone service provider. Similarly, called parties could also similarly be an end user device or the network telephone service provider acting on behalf of the recipient of the call. Used on its own, this specification assumes that the called party user agent can trust the SIP network or the SIP provider to assign, deliver and protect the correct rich call data (RCD) information as an end-to-end security policy. However, as is true in many interconnected services, this end-to-end trust can not be guarenteed and therefore as the recommended approach, the entity inserting the Call-Info header field should also sign the caller information via STIR defined protocol tools for SIP and specifically through the use of Rich Call Data (RCD) or the "rcd" PASSporT defined in . Alternatively, this specification can be utilized in conjunction with the protocols defined in as part of the communications signaling path, but specifically in the trusted UNI device interface at the terminating side of the communications as part of an authenticated network to device trusted signaling where a device may not have the ability to verify the "rcd" PASSporT, but can receive the RCD information using Call-Info as defined in this specification. provides a means of carrying additional data about callers for the purposes of emergency services (especially its Section 4.4 "Owner/Subscriber" information). This specification provides an overlapping functionality for non-emergency cases. Rather than overloading its "EmergencyCallData" Call-Info "purpose" parameter value, this document defines a separate "purpose" parameter for the more generic delivery of information via jCard . This document borrows from the capability to carry a data structure as a body, through the use of the "cid" URI scheme .

Terminology The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 when, and only when, they appear in all capitals, as shown here.

Overview The Call-Info header field, defined in Section 20.9, defines a purpose parameter currently with "info", "icon", and "card" tokens. This document defines two new purpose values and one new generic parameter for Call-Info. The first purpose value defined is "jcard" and is used to associate rich call data related to the identity of the calling party in the form of a jCard . While there is a "card" token that is already defined with similar purpose, there are two primary reasons for the definition and usage of jCard and the use of JSON over the XML based vCard . First, JSON has become the default and is generally the widely accepted optimally supported format for transmission, parsing, and manipulation of data on IP networks. Second, jCard has also been defined in and has been adopted by PASSporT because of the usage of JSON Web Tokens (JWT) . A parameter for "call-reason" is to be used to provide a string or other object that is used to convey the intent or reason the caller is calling to help the called party understand better the context of the call and why they may want to answer the call.

A Call-Info framework for carrying Rich Call Data This document is intended to extend the currently defined Call-Info to be compatible and complimentary to the Rich Call Data framework defined in . In general, a SIP based call involves multiple hops that transition between different trusted and untrusted network relationships. The STIR framework is intended to address the protection of the carriage of different call information and identities over untrusted network relationships that wasn't addressed when the SIP specifications were originally defined. Call-Info, as defined in Section 20.9, is the defined mechanism for carrying call and caller related information, currently defining the "icon", "info", and "card" purpose tokens, and also defines proceedures for defining new purpose tokens. This document will discuss the use of both existing tokens and define new purpose tokens to correspond to the Rich Call Data framework. There are a number of Rich Call Data information that can use the Call-Info header field to transmit the information in a SIP request. The current STIR Rich Call Data specification defines calling name and a logo or icon associated with the caller and a call reason string. It also discusses a more extensible way of carrying caller information using jCard . It may be that future specifications may extend more information types and similar to how this document discusses extending Call-Info to provide corresponding functionality to STIR RCD it is RECOMMENDED that future specifications also provide corresponding Call-Info extensions. As discussed in , calling name is already covered in using the display-name component of the From header field value of the request, alternatively for some calls this may come from the P-Asserted-ID header . This is out of scope for Call-Info header field so will not be covered in this document further. For logos or icons that can represent the calling party the "icon" purpose token is defined in and is intended to be used for defining a URI to reference an image resource that can be displayed to the user that receives the SIP request. For the purpose of this document and the transmission of Rich Call Data, this purpose token should be used as defined. There is some high level guidance provided later in the document around some of the image formatting and related information. Call reason is a new purpose that this document defines as a string with a new Call-Info header field parameter. jCard is another more comprehensive and extensible mechanism defined in the STIR Rich Call Data framework. While does have a "card" purpose token, the intent of defining a new "jcard" purpose token is to specifically use the JSON jCard and provide specific guidance in this document for the use and non-use of the attributes of the jCard specification specific to describing the calling party in a communications session as well as some of the security considerations around that information. Both of these new purpose tokens are defined in the next sections.

"jcard" Call-Info Token The use of the new Call-Info Token "jcard" is for the purpose of supporting RCD associated with the identity of a calling party in a SIP call Section 20.9. The format of a Call-Info header field when using the "jcard" is as follows. The Call-Info header field is defined to include a URI, where here the resource pointed to by the URI is a jCard JSON object . The MIME media type set for the JSON text MUST be set as application/json with a default encoding of UTF-8 . A jCard also MAY be carried in the body of the SIP request bearing this Call-Info via the "cid" URI scheme . Alternatively, the URI MUST define the use HTTPS or a transport that can validate the integrity of the source of the resource as well as the transport channel through which the resource is retrieved. An example of a Call-Info header field is:

;purpose=jcard ]]> An example contents of a URL linked jCard JSON file is shown as follows:

An example SIP INVITE using the "cid" URI scheme is as follows.

From: Bob ;tag=1928301774> Call-ID: a84b4c76e66710 Call-Info: ;purpose=jcard;call-reason= \ "Rendezvous for Little Nellie" CSeq: 314159 INVITE Max-Forwards: 70 Date: Fri, 25 Sep 2015 19:12:25 GMT Contact: Content-Type: multipart/mixed; boundary=boundary1 Content-Length: ... --boundary1 Content-Type: application/sdp v=0 o=UserA 2890844526 2890844526 IN IP4 pc33.atlanta.example.com s=Session SDP c=IN IP4 pc33.atlanta.example.com t=0 0 m=audio 49172 RTP/AVP 0 a=rtpmap:0 PCMU/8000 --boundary1 Content-Type: application/vcard+json Content-ID: <12155551000@example.com> ["vcard",[["version",{},"text","4.0"],["fn",{},"text","Q Branch"], ["org",{},"text","MI6;Q Branch Spy Gadgets"],["photo",{},"uri","ht tps://example.com/photos/quartermaster-256x256.png"],["logo",{},"u ri","https://example.com/logos/mi6-256x256.jpg"],["logo",{},"uri", "https://example.com/logos/mi6-64x64.jpg"]]] ]]>

"call-reason" Call-Info Parameter This specification also defines a parameter of the Call-Info header called "call-reason". The "call-reason" parameter is intended to convey a short textual message suitable for display to an end user during call alerting. As a general guideline, this message SHOULD be no longer than 64 characters; displays that support this specification may be forced to truncate messages that cannot fit onto a screen. This message conveys the caller's intention in contacting the callee. It is an optional parameter, and the sender of a SIP request cannot guarantee that its display will be supported by the terminating endpoint. The manner in which this reason is set by the caller is outside the scope of this specification. One alternative approach would be to use the baseline Subject header field value to convey the reason for the call. Because the Subject header has seen little historical use in SIP implementations, however, and its specification describes its potential use in filtering, it seems more prudent to define a new means of carrying a call reason indication. An example of a Call-Info header field value with the "call-reason" parameter follows:

;purpose=jcard; call-reason="For your ears only" ]]> Refer to the next section that extends call-reason and, in particular, discusses reasoning for the use of "call-reason" parameter versus considering "jinfo" with an included "call-reason" key value.

Examples and usage of Call-Info for Rich Call Data The procedures for the usage of the purpose tokens and URIs should generally follow the procedures defined in . So, as an example, if there is a jCard and icon with a call reason, the following example shows the use of mulitple purpose and parameters in the the Call-Info header field.

;purpose=jcard; ;purpose=icon; call-reason="For your ears only" ]]> There is the possible case where there may only be a call-reason present and no other Rich Call Data related info. In this case, it is RECOMMENDED to use the null data URI, "data:" as the URI with any purpose parameter. As an example:

;purpose=icon; call-reason="For your ears only" ]]>

Usage of jCard and property specific usage Beyond the definition of the specific properties or JSON arrays associated with each property. This specification defines a few rules above and beyond specific to the use of jCard for Call-Info and Rich Call Data making sure there is a minimum level of supported properties that every implementation of this specification should adhere to. This includes support for interpreting the value of this property and the ability to render in some appropriate form the display capabilities of common telephone devices, as well as apps, and also includes requirements specific to either textual displays and graphics capable displays.

Usage of URIs in jCard When one or more URIs are used in a jCard, it is important to note that any URI referenced data, with the exception of the top-level usage of "jcl" as a URI to the jCard itself (unless updated by any future extensions of this specification) MUST NOT contain any URI references. In other words, the jCard can have URI references as defined in the jCard specification and this document, but the content referenced by those URIs MUST NOT have any URIs, and therefore MUST be enforced by the client to not follow those URI references or not render that content to the user if any URI are present in that specific URI linked content. The purpose of this is to control the security and more specifically align with the content integrity mechanism defined in . It is the belief of the authors that there isn't a scenario that deeper URI references would be required or even supported by the current set of properties for the typical use of jCard properties, but because jCard is extensible, this rule is set to restrict further extension without the proper consideration of security and integrity properties of both Call-Info usage as well as the Rich Call Data and STIR signing of the data , .

Usage of multimedia data in jCard or with icon With the use of the purpose token "icon" or for the cases where jCards incorporate URIs or directly include via Base64 encoding of digital images and sounds. We specify a few recommended conventions to facilitate more consistent support of the successful decoding and rendering of these images or media formats. For images, such as for the photo and logo properties, the default image formats SHOULD be png or jpg. These files are mostly commonly used to support 24-bit RGB images which should consequently be the default. There are some older telephone devices that may only support bmp type of images with lower bit-range (e.g. 16-bit or 8-bit or 1-bit), also with potentially only grayscale or 1-bit black and white color displays. These exceptions are should considered optional to support or even recommended not to support and at least at the time of writing this document are becoming increasingly rare (i.e. typically displays on devices are either color or color-aware graphical displays that support png or jpg formats or exclusively textual displays). In addition, vector images are increasingly popular in their use for icons and the need for scalable images without having to send multiple resolutions. SVG format and a minimum of support for specifically appropriate for this specification has gained wide support as of the writing of this document, as a common format for vector images and should be supported as an additional default format for devices that support this specification. For the cases where image files are referenced by URIs as file resources, this document defines a character string that SHOULD be concatenated on to the end of a file name, before the file extension that signals the height and width of the image to the end device for the convenience of determining the appropriate resolution to retrieve without the need to retrieve all the image files. It is also recommended that images are square ratio formatted with equal height and width and with a power of two value for the number of pixels (e.g. 32x32, 128x128, 512x512). The format of the string should be "filename-HxW" where filename represents the unique string representing the file and H represents the height in pixels and W represents the width in pixels. Because this is a complex and often debated topic that has evolved over the many years of advances in image coding and display technologies, we likely suggest relying on either future specifications or industry forum specifications that might correspond to supporting particular classes of devices to further define how URIs can reference appropriate image formats and files. For audio files, the recommendation is to provide mp3, m4a, or wav files, although the usage of sound is not well defined in this specification as, for example, a special ring tone for a particular caller, and future documents should consider both usage and potential security risks of playing sounds that are not specifically authorized by a device user.

Cardinality Property cardinalities are indicated, for convenience, using the following notation and follow the guidance of jCard and vCard , which is based on ABNF (see , Section 3.6):

Identification properties These types are used to capture information associated with the identification and naming of the entity associated with the jCard. They are initially defined in , but the following list of properties included and repeated in this Section is a subset of the properties defined for jCard with properties selected for this document that have relevance to telephone and messaging applications. jCard is an extensible object and therefore, there may also be future specifications that extend the set of properties that may be relevant to the set of communications applications that utilize this specification.

"fn" property The "fn" property has the intent of providing a formatted text corresponding to the name of the object the jCard represents. Reference Section 6.2.1. Value type: A single text value. Cardinality: 1*

"n" property The "n" property has the intent of providing the components of the name of the object the jCard represents. Reference Section 6.2.2. Value type: A single structured text value. Each component can have multiple values. Cardinality: *1

"nickname" property The "nickname" property has the intent of providing the text corresponding to the nickname of the object the jCard represents. Reference Section 6.2.3. Value type: One or more text values separated by a COMMA character (U+002C). Cardinality: *

"photo" property The "photo" property has the intent of supplying an image or photograph information that annotates some aspect of the object the jCard represents. Reference Section 6.2.4. In addition to the definition of jCard, and to promote interoperability and proper formatting and rendering of images, the photo SHOULD correspond to a square image size of the sizes 128x128, 256x256, 512x512, or 1024x1024 pixels. Value type: A single URI. Cardinality: *

Delivery Addressing Properties These properties are concerned with information related to the delivery addressing or label for the jCard object.

"adr" property The "adr" property has the intent of providing the delivery address of the object the jCard represents. Reference Section 6.3.1. Value type: A single structured text value, separated by the SEMICOLON character (U+003B). Cardinality: *

Communications Properties These properties describe information about how to communicate with the object the jCard represents.

"tel" property The "tel" property has the intent of providing the telephone number for telephony communication of the object the jCard represents. Reference Section 6.4.1. Relative to the SIP From header field value this information may provide alternate telephone number or other related telephone numbers for other uses. It is important to note that any of the potential instances of the "tel" property should not be considered part of the authentication or verification part of STIR or required to match the "orig" claim in the PASSporT . These telephone numbers should be considered for contact, fax, or other purposes aligned with the general usage of jCard and vCard, although consideration of confusing the caller with different contact telephone number information versus the actual verified telephone number should be made from a general policy point of view. Value type: By default, it is a single free-form text value (for backward compatibility with vCard 3), but it SHOULD be reset to a URI value. It is expected that the URI scheme will be "tel", as specified in , but other schemes MAY be used. Cardinality: *

"email" property The "email" property has the intent of providing the electronic mail address for communication of the object the jCard represents. Reference Section 6.4.2. Value type: A single text value. Cardinality: *

"lang" property The "lang" property has the intent of providing the language(s) that may be used for contacting of the object the jCard represents. Reference Section 6.4.4. Value type: A single language-tag value. Cardinality: *

Geographical Properties These properties are concerned with information associated with geographical positions or regions associated with the object the jCard represents.

"tz" property The "tz" property has the intent of providing the time zone of the object the jCard represents. Reference Section 6.5.1. Note: the up-to-date reference for where time-zone names are maintained is, at the authoring of this document, at this web address, https://www.iana.org/time-zones. Value type: The default is a single text value. It can also be reset to a single URI or utc-offset value. Cardinality: *

"geo" property The "geo" property has the intent of providing the global positioning of the object the jCard represents. Reference Section 6.5.2. Value type: A single URI. Cardinality: *

Organizational Properties These properties are concerned with information associated with characteristics of the organization or organizational units of the object that the jCard represents.

"title" property The "title" property has the intent of providing the position or job of the object the jCard represents. Reference Section 6.6.1. Value type: A single text value. Cardinality: *

"role" property The "role" property has the intent of providing the position or job of the object the jCard represents. Reference Section 6.6.2. Value type: A single text value. Cardinality: *

"logo" property The "logo" property has the intent of specifying a graphic image of a logo associated with the object the jCard represents. Reference Section 6.6.3. Value type: A single URI. Cardinality: *

"] ]]>

"org" property The "org" property has the intent of specifying the organizational name and units of the object the jCard represents. Reference Section 6.6.2. Value type: A single structured text value consisting of components separated by the SEMICOLON character (U+003B). Cardinality: *

Explanatory Properties These properties are concerned with additional explanations, such as that related to informational notes or revisions specific to the jCard.

"categories" property The "categories" property has the intent of specifying application category information about the object the jCard represents. Reference Section 6.7.1. Value type: One or more text values separated by a COMMA character (U+002C). Cardinality: *

"note" property The "note" property has the intent of specifying supplemental information or a comment about the object the jCard represents. Reference Section 6.7.2. Value type: A single text value. Cardinality: *

"sound" property The "sound" property has the intent of specifying a digital sound content information that annotates some aspect of the object the jCard represents. This property is often used to specify the proper pronunciation of the name property value of the jCard. Reference Section 6.7.5. Value type: A single URI. Cardinality: *

"] ]]>

"uid" property The "uid" property has the intent of specifying a globally unique identifier corresponding to the object the jCard represents. Reference Section 6.7.6. Value type: A single URI value. It MAY also be reset to free-form text. Cardinality: *1

"url" property The "url" property has the intent of specifying a uniform resource locator associated with the object the jCard represents. Reference Section 6.7.8. There is potential security and privacy implications of providing URLs with telephone calls. The end client receiving a jCard with a URL property MUST only display the URL and not automatically follow the URL or provide automatic preview of the URL, and generally provide good practices in making it clear to the user it is their choice to follow the URL in a browser context consistent with all of the common browser security and privacy practices available on most consumer OS environments. Value type: A single uri value. Cardinality: *

"version" property The "version" property MUST be included and is intended to specify the version of the vCard specification used to format this vCard. Reference Section 6.7.9. Value type: A single text value. Cardinality: 1

Extension of jCard Part of the intent of the usage of jCard is that it has its own extensibility properties where new properties can be defined to relay newly defined information related to a caller. This capability is inherently supported as part of standard extensibility. However, usage of those new properties should be published and registered following Section 3.6 or new specifications.

Acknowledgements We would like to thank David Hancock, Alec Fenichel and other members of the SIPCORE and STIR working group for helpful suggestions and comments for the creation of this draft.

IANA Considerations

SIP Call-Info Header Field Purpose Token Request [this RFC] defines the "jcard" token for use as a new token in the Call-Info header in the "Header Field Parameters and Parameter Values" registry defined by .

SIP Call-Info Header Field Purpose Token Request [this RFC] defines the "call-reason" generic parameter for use as a new parameter in the Call-Info header in the "Header Field Parameters and Parameter Values" registry defined by . The parameter's token is "call-reason" and it takes the value of a quoted string.

Security Considerations Revealing information such as the name, location, and affiliation of a person necessarily entails certain privacy risks. SIP and Call-Info has no particular confidentiality requirement, as the information sent in SIP is in the clear anyway. Transport-level security can be used to hide information from eavesdroppers, and the same confidentiality mechanisms would protect any Call-Info or jCard information carried or referred to in SIP. The security framework of signing and providing integrity to this data should be followed , with the idea that the use of constraints and other certificate based associations should be considered. This includes considerations around information about the calling party being generally constant vs per call data being more temporal. This also includes the relationship that certificates with constraints presents to how they relate to each other and how that information is managed, protected, and associated with the correct call corresponding to a calling party.