How Header Enrichment Works
When a subscriber opens a website or mobile app through the operator’s network, the HTTP request passes through network elements capable of analyzing and modifying traffic. This function is usually performed by DPI platforms, such as the traffic control and analysis system (Stingray) from VAS Experts, proxy servers, or specialized service gateways.
During request processing, the system can add one or more HTTP headers containing information about the subscriber. For example:
- a unique user identifier;
- phone number (MSISDN);
- session identifier;
- tariff plan or connection type data;
- information about the operator’s home network.
The web service then receives this additional data and can automatically authorize the user or provide personalized services.
What Data Can Be Transmitted
The set of headers depends on the operator’s requirements and the specific service.
| Header | Purpose |
| MSISDN | Transmits the subscriber’s phone number |
| Subscriber ID | Unique user identifier |
| Session ID | Identifier of the current session |
| Operator ID | Identifier of the mobile operator |
| Device Information | Information about the device or connection type |
In practice, operators rarely transmit the phone number in plain form. Temporary identifiers or tokens are more commonly used, allowing user identification without exposing personal data.
Where Header Enrichment Is Used
The technology is applied in services where it is important to quickly identify a user without additional registration.
Main use cases:
- activating mobile subscriptions;
- authorization by phone number;
- paying for digital content;
- mobile banking services;
- operator partner programs;
- personalization of web applications.
In many countries, the technology is used together with Single Sign-On (SSO) mechanisms, allowing the user to be automatically identified when connecting through the mobile network.
Advantages and Limitations
| Advantages | Limitations |
| Fast authorization without entering a phone number | Only works when connecting through a mobile operator’s network |
| Improved user experience | Requires user consent in accordance with legislation |
| Ability to personalize services | Not supported when using VPN or certain proxies |
| Integration with operator platforms | Limited by the operator’s security policies |
Header Enrichment Security
Transmitting additional information requires strict compliance with personal data protection requirements.
Modern operators use several security mechanisms:
- transmit data only over a secure HTTPS connection;
- replace the phone number with pseudonyms or tokens;
- limit the list of services that have access to additional headers;
- maintain a usage log of the technology;
- apply user Consent Management mechanisms.
Processing of such data is regulated by GDPR, Federal Law No. 152-FZ, and other regulatory acts depending on the country.
The Role of DPI in Header Enrichment
To implement HE, an operator needs to analyze HTTP and HTTPS traffic, determine user session parameters, and apply request processing policies. These tasks are often solved using DPI (Deep Packet Inspection) and policy enforcement systems (PCRF/PCEF).
VAS Experts solutions make it possible to analyze mobile subscriber traffic, manage service policies, and integrate with mobile operators’ service platforms.
More about solutions for mobile networks — on this page.
Technical FAQ
What is Header Enrichment in simple terms?
Header Enrichment is a technology in which the operator automatically adds service data about the subscriber to HTTP requests. This allows the web service to identify the user without entering a phone number or login.
What data is transmitted through Header Enrichment?
Depending on the operator’s settings, the data transmitted may include a subscriber identifier, phone number (MSISDN), session identifier, network information, or a temporary token. Modern networks prefer to use anonymized identifiers.
Does Header Enrichment work over Wi-Fi?
Usually not. The technology is designed to work within the operator’s mobile network. When connecting via Wi-Fi, VPN, or a third-party proxy, additional headers are generally not added.
How secure is Header Enrichment technology?
When properly implemented, the technology meets modern security requirements. Data is transmitted over secure connections, and personal information can be replaced with temporary identifiers or tokens.
