AAA Platform

One programmable AAA platform to run every access scenario in your network core – covering authentication, authorization and accounting.

Take control of access, authentication and accounting

Our AAA Platform, a programmable AAA layer built on a proven Diameter signaling stack, integrates with existing HSS, DSR, subscriber directories and billing systems. By serving as the one place where new access-control scenarios are launched and evolved, it removes the need to create – a new system for every new requirement.

Built for extension, not replacement

Every new authentication method or business rule runs as an extension of the same core – no new project, no new infrastructure.

No traffic-volume licensing limits

Scale usage and add new use cases freely, without licensing costs tied to network traffic volume.

Lightweight and fast to integrate

A full production environment with geo-redundancy runs on a small footprint, with standard signaling interfaces and no need to rebuild the network core.

Multiple authentication methods

Support SIM/eSIM (EAP-AKA/AKA’), certificate-based access (IKEv2) and EAP-TTLS with external directories (LDAP/AD) – so identity can be verified regardless of the subscriber, device or partner.

VoWiFi session extensions

Add the signaling layer needed to authorize voice calls carried over WiFi networks, correlate the new session with the subscriber’s existing authentication and integrate with the HSS for re-authorization and session termination.

SWx and SWm Diameter interfaces

Communicate with network cores through two Diameter interfaces: SWx toward the HSS, to retrieve authentication vectors, register or deregister subscriber sessions, and SWm toward the DSR, to carry the authentication exchange and manage the session’s lifecycle end to end.

Protocol consolidation and intelligent routing

Run Diameter, RADIUS and TACACS+ side by side and mediate between system generations – including RADIUS-to-SQL and HTTP/2-to-Diameter conversion – while routing authentication requests to the correct destination node by subscriber identity.

Encrypted and pseudonymized IMSI handling

Recognize and resolve temporary subscriber identities while staying compliant with privacy requirements and improve performance through cache mapping.

Real-time entitlement logic

Check prepaid balance or postpaid account status before granting access, with automatic redirection to a top-up portal when needed.

IoT access control

Apply access policies and manage connectivity for large-scale IoT device deployments.

Custom business rules and scenarios

Define your own authorization and request-processing logic, or build entirely custom AAA scenarios – without touching the platform’s signaling layer.

Deployment models

A tailored approach to clients, fast response times and adaptability ensure seamless implementation, regardless of location, in-house infrastructure and company culture.

On-premises

Designed as off-the-shelf products, Amplitiv solutions can flexibly satisfy the needs of most operators, without any customizations. Our specialized deployment teams, capable of swiftly launching our services, have a proven track record of successfully deploying our systems in production environments within three months of a purchase order.

Turn-key customizations

Our development team is ready to adjust our solutions to fit the goals of individual operators. We customize and fine-tune our components to clients' needs, as well as develop custom applications and integrations that extend baseline products.