The importance of phone numbers is too easily dismissed in a world
of email addresses, Skype IDs and IM buddies. Numbers work across all
alphabets and typefaces, are relatively unambiguous, are easily entered
and displayed on restricted UIs, and can easily be conveyed verbally
and in print. We have a system for mnemonic mapping to letters where
necessary. Competing global numbering schemes are unlikely to emerge,
because of potential for namespace confusion (although local versions
such as SMS short codes do sprout up).
Numbering is serious business, if somewhat obscure and technocratic.
Despite their sometimes confusing split semantics as "naming" and
"routing" objects, they need not be casually dismissed as an obsolete
anachronism of the pre-IP world.
The technical problem any ENUM system solves is the conversion of a phone number to any other form of URL (and back again). The specific business problem that Carrier ENUM purports
to solve is one of trust. If the user is empowered to create records in
the routing table for IP communications, you face two problems. Does
the user really own/control the ID that they are mapping from? And do
they own the one that they are mapping to?
The puchase of the voice service acts as the "trust anchor" — if we gave you the phone number and VoIP URL, the mapping must be correct.
Yet in doing this Carrier ENUM denies you
any possibility of asserting ownership over your phone number
independently of purchasing an overpriced "voice service". It's a bit
like you only being able to buy domain names in conjunction with
getting an email account at AOL or MSN.
If you happened to want to use your email address (think: "phone
number") in some crazy new-fangled service like instant messaging
(think: VoIP), you've got a problem. Oh, sure, you can do it in various
numbering range ghettos that aren't routed by half the world (and are
charged at random rates by the other half). It's like Microsoft's
support for Apple — sure, we like competition, as long as it knows its
place.
With domain names, I can obtain clear ownership. I get to set a
record for my domain that says who I'm empowering to manage the
domain's details for me. In other words, someone thought through the
various roles of ownership, assignment, management, operation, etc. in
advance. They made a reasonable stab at creating a system that
separated them. With hindsight we know it's not perfect and involves
excessive expense, but it's quite good.
What you would really like to be able to do is enter someone's phone
number in Skype, call them, and if they're using a Skype-enabled device
you get an ecrypted, wideband audio Skype call. But we can't do that
easily today because I could claim to have your phone number, and calls
to you would come to me.
I'm totally guessing, but I assume that the PhoneGnome device (which bridges PSTN and VoIP calling) has some patented secret provisioning sauce to tackle this problem. The device, I suppose, places a free PSTN out-call and uses caller ID to associate the SIP address and PSTN number. (Self-provisioning would allow you to fib too easily.) But it doesn't
scale well unless we all buy one; and an $119 device is kind of
expensive if all you want to do is prove you are the owner of a phone
number so you can use it in an IP service like Skype.
Carrier ENUM makes me feel a bit queasy, because there's no need to be a "carrier" to do VoIP or ENUM.
If the VoIP application is independent of transport, will I be able to
declare myself to be a carrier, obtain numbers, and participate in
Carrier ENUM? Methinks not, and that smells bad. (I also suspect Carrier ENUM is great for perpetuating the dependence on SIP proxies and smart networks a-la IMS, and preventing P2P
connections. You can bet the technical rules will subtly stop any
domestic IP connection from being classed as "carrier grade" and
allowed to participate in Carrier ENUM as a peer.)
So is the only alternative the unattainable nirvana of User ENUM, where the plebs seize control? Not necessarily, but we could take some baby steps along the way.
If I were a regulator, I'd be looking to unbundle the phone number trust function.
Luckily, we've already got a model for it, at least in the UK. If you want to port your wholesale DSL line
from one company to another, the requestor must receive an
authorisation code issued by the incumbent. And the incumbent must
authenticate the user when they request the code.
Break apart this mechanism, and it provides me a way of requesting
codes, and third parties using them to authenticate my ownership, but
without actually completing a number port.
This only works for the phone number ("E164 number" in telcospeak). If I wanted to map it to my Skype ID, I still need a similar mechanism to assert ownership of that ID. This strikes me as a problem easily solved with today's digital ID technology ;)
It would not be unreasonable for a "virtual VoIP network operator"
like Skype to charge you for access to this trusted directory function.
Particularly if the receipient was a POTS (or POTS-on-IP)
competitior that wants to disintermediate the Skype network while still
allowing the use of Skype IDs! (There's an business model struggling to
emerge in every VoIP operator…) Given the near-zero barrier to market
entry, let the market find a price, I say.
Since numbers are also de-provisioned and re-cycled, invalidating
the truth of ownership, there needs to be a mechanism to publish these
events. This is non-trivial. But even if we don't solve this problem at
all, the system seems stronger than the contract-based alernative of DUNDi, where the user unilaterally asserts truth in identifier ownership, and post hoc regulation deals with miscreants. At least we got the records right up front, even if they age badly.
This solution may be a turkey. I've no idea. But there are plenty of
other possibilities lined up. For example, I could port control of my
number to Skype, but retain the actual voice service somewhere else. If
DNS can separate out the ownership,
registration and operation roles, so can numbering. Part of the problem
is being presented with a false dichotomy of Carrier vs. User ENUM. Another part is ENUM accepts
the legacy world of phone numbers on the carrier's terms - such as
accepting only the management roles that existed in the old world. It
may seem pragmatic now, but we'll regret it later as new features take
decades to reach "numbered" devices via the numbering cartel.
A deeper part of the problem is the assumption that we want a single, monolothic POTS application
— that calling any phone number should make a single device "ring" and
be answered. The idea you would place a bell in your house and remotely
allow anyone in the world to activate it day or night will seem truly
quaint to our grandchildren. ENUM focuses
tightly on legacy phone numbers and their messed-up meanings, rather
than offering a general frameworks for inter-service interoperability.
Is ENUM a good answer to a bad question?
Anyhow, let's disaggregate the functions behind the Carrier ENUM curtain.
Let multiple domain-specific registries and directories emerge,
re-combining the elements in new and useful ways. Let them be safe in
the knowledge that the records in their directories have at least some
kernel of truth to them. Let some competition into places that don't
know what competition and innovation are.