Authentication, Authorization, and Accounting in WebRTC PaaS Infrastructures: The Case of Kurento Articles uri icon


publication date

  • August 2014

start page

  • 34

end page

  • 40


  • 6


  • 18

International Standard Serial Number (ISSN)

  • 1089-7801

Electronic International Standard Serial Number (EISSN)

  • 1941-0131


  • Server infrastructures for Web Real-Time Communications (WebRTC) are useful for creating rich applications. Developers commonly use them to access capabilities such as group communications, archiving, and transcoding. Kurento is an open source project that provides a WebRTC media server and a platform as a service (PaaS) cloud built on top. The authors present its API and analyze different security models for it, investigating the suitability of using simple access control lists and capability-based security schemes to provide authorization.


  • Computer Science