Network address family translation method and system

• US 10,263,951 B2
• Filed: 05/04/2017
• Issued: 04/16/2019
• Est. Priority Date: 01/09/2017
• Status: Active Grant

• Current Assignee: Star2Star Communications LLC (Sangoma Technologies Corporation)
• Original Assignee: Star2Star Communications LLC (Sangoma Technologies Corporation)
• Inventors: Kielhofner, Kristian, Worthington, III, Norman A.
• Primary Examiner(s): Tran, Jimmy H
• Application Number:
  US15/586,758
• Publication Number:
  US 20180198754A1
• Time in Patent Office: 712 Days
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 45/02 Topology update or discovery
• CPC Class Codes: H04L 45/14 Routing performance; Theoretical aspects
• CPC Class Codes: H04L 45/20 Hop count for routing purposes, e.g. TTL
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 61/2585 through application level gateway [ALG]
• CPC Class Codes: H04L 61/2592 using tunnelling or encapsulation
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]

Abstract

The present invention, generally, is directed towards sending and receiving communication sessions across more than one network using an address family translation or network address translation (NAT) system and method. Such application is directed towards providing the ability to send and receive communications sessions between communication nodes, network edge devices, and the like, using more than one Internet protocol. This application is especially advantageous where communication sessions need to be transferred from one location to a second using the public Internet, i.e., Internet access provided by third-party Internet service providers (ISPs). The present invention, also, provides a translation system and method which may allow a communication node or a network edge device to recognize and interpret communication sessions received over a third-party Internet connection from a device hidden by a third party ISP-provided NAT implementation.

Claims

1. A method for optimizing a communication session from a first network comprising at least one first communication node to a second network comprising at least one second communication node, the method comprising:

receiving an at least one session parameter at a first communication node in the first network indicating initiation of the communication session, the at least one session parameter comprising an originating node network type identifying the first network, a session criteria, a session type, and a predetermined routing information for routing the communication session, wherein the predetermined routing information further comprises a destination node network type identifying a network within which a destination node is located;

retrieving to the first communication node from a local communication node database a list of communication nodes through which the communication session may be routed, wherein the list of communication nodes contains all possible communication nodes in both the first network and the second network, and wherein the list of communication nodes has a prioritization based at least in part on a session criteria and a session type of each of the all possible communication nodes;

identifying at the first communication node, based on a set of business rules stored at and executed by a processing unit of the first communication node, an optimized communication node from the list of communication nodes, wherein when the set of business rules is executed, the processing unit analyzes the list of communication nodes based at least in part on the at least one session parameter and the prioritization of the list of communication nodes;

determining at the first communication node if the optimized communication node is within the first network or within the second network;

upon the first communication node determining the optimized communication node is within the second network, modifying at the first communication node at least one abstraction layer of the communication session by modifying at least one implementation instruction for a set of functionality of the at least one abstraction layer to allow transmission of the communication session from the first communication node within the first network to the optimized communication node within the second network; and

modifying the predetermined routing information further comprising the destination node network type to identify the second network, wherein the communication session is transmitted from the first communication node within the first network to the optimized communication node within the second network.

2. The method of claim 1, wherein the first communication node is at least one of an originating node, an intermediary node, and a destination node.

3. The method of claim 1, further comprising the first communication node detecting an at least one translation from a first protocol to a second protocol occurring at an at least one third communication node and initiating an encrypted communication tunnel to a remote destination node, wherein the at least one third communication node is upstream from the first communication node, and wherein following the initiation of the encrypted communication tunnel a portion of the predetermined routing information is modified to transmit a portion of the communication session to the remote destination node.

4. The method of claim 1, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises a translation at a network layer of a first Internet Protocol (IP) address of the communication session to a second IP address based on at least one of the set of business rules, a determination the optimized communication node is within the second network, at least one transport layer protocol, and the at least one session parameter.

5. The method of claim 1, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises modifying at a transport layer a user datagram protocol (UDP) by a translation of at least one of a source service port and a destination service port based on at least one of the business rules, a determination the optimized communication node is within the second network, the session type of the communication session, and at least one application layer protocol.

6. The method of claim 5, wherein the at least one application layer protocol comprises at least one of a real-time transport protocol (RTP) and a session initiation protocol (SIP).

7. The method of claim 1, wherein the first communication node further comprises a session border controller (SBC), wherein when the first communication node determines the optimized communication node is within the second network the first communication node acts as a gateway and a proxy between the first network and the second network.

8. The method of claim 1, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises modifying at an application layer a session description protocol (SDP) containing at least one of a communication session announcement, a communication session invitation, and a session parameter negotiation data, wherein the modification at the application layer is based on at least one of the set of business rules, a determination the optimized communication node is within the second network, the session type of the communication session, a translation at a network layer, and a modification at a transport layer.

9. The method of claim 8, wherein modification of the application layer occurs when the communication session at the application layer comprises at least one of an RTP and a SIP.

10. The method of claim 8, wherein modification of the application layer occurs if the translation occurs at the network layer or the modification occurs at the transport layer.

11. The method of claim 8, wherein modification of the application layer occurs if the translation occurs at the network layer and the modification occurs at the transport layer.

12. The method of claim 1, further comprising rerouting the communication session from the first communication node if the communication session has a modified SDP, wherein rerouting the communication session comprises modifying inbound predetermined routing information of the communication session for a destination node.

13. A system for optimizing a communications session from a first network comprising at least one first communication node to a second network comprising at least one second communication node, the system comprising:

a local communication node database for storing a list of communication nodes in both the first network and the second network through which the communication session may be routed; and

a first communication node in the first network operatively coupled to the local communication node database and comprising a hardware processor operative to;

receive an at least one session parameter at the first communication node indicating initiation of the communication session, the at least one session parameter comprising an originating node network type identifying the first network, a session criteria, a session type, and predetermined routing information for routing the communication session, wherein the predetermined routing information further comprises a destination node network type identifying a network within which a destination node is located;

retrieve to the first communication node from the local communication node database a list of communication nodes through which the communication session may be routed, wherein the list of communication nodes contains all possible communication nodes in both the first network and the second network, and wherein the list of communication nodes has a prioritization based at least in part on a session criteria and a session type of each of the all possible communication nodes;

identify at the first communication node, based on a set of business rules stored at and executed by the hardware processor, an optimized communication node from the list of communication nodes, wherein when the set of business rules is executed, the hardware processor analyzes the list of communication nodes based at least in part on the at least one session parameter and the prioritization of the list of communication nodes;

determine at the first communication node if the optimized communication node is within the first network or within the second network;

upon the first communication node determining the optimized communication node is within the second network, modify at the first communication node at least one abstraction layer of the communication session by modifying at least one implementation instruction for a set of functionality of the at least one abstraction layer to allow transmission of the communication session from the first communication node within the first network to the optimized communication node within the second network; and

modify the predetermined routing information further comprising the destination node network type to identify the second network, wherein the communication session is transmitted from the first communication node within the first network to the optimized communication node within the second network.

14. The system of claim 13, wherein the first communication node is at least one of an originating node, an intermediary node, and a destination node.

15. The system of claim 13, wherein the hardware processor is further operative to detect an at least one network address translation occurring at an at least one third communication node and initiating an encrypted communication tunnel to a remote destination node, wherein the at least one third communication node is upstream from the first communication node, and wherein following the initiation of the encrypted communication tunnel a portion of the predetermined routing information is modified to transmit a portion of the communication session to the remote destination node.

16. The system of claim 13, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises a translation at a network layer of a first Internet Protocol (IP) address of the communication session to a second IP address based on at least one of the set of business rules, a determination the optimized communication node is within the second network, at least one transport layer protocol, and the at least one session parameter.

17. The system of claim 13, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises modifying at a transport layer a user datagram protocol (UDP) by a translation of at least one of a source service port and a destination service port based on at least one of the business rules, a determination the optimized communication node is within the second network, the session type of the communication session, and at least one application layer protocol.

18. The system of claim 17, wherein the at least one application layer protocol comprises at least one of a real-time transport protocol (RTP) and a session initiation protocol (SIP).

19. The system of claim 13, wherein the first communication node further comprises a session border controller (SBC), wherein when the first communication node determines the optimized communication node is within the second network the first communication node acts as a gateway proxy between the first network and the second network.

20. The system of claim 13, wherein modifying the at least one implementation instruction for the set of functionality of the at least one abstraction layer comprises modifying at an application layer a session description protocol (SDP) containing at least one of a communication session announcement, a communication session invitation, and a session parameter negotiation data, wherein the modification at the application layer is based on at least one of the set of business rules, a determination the optimized communication node is within the second network, the session type of the communication session, a translation at a network layer, and a modification at a transport layer.

21. The system of claim 20, wherein modification of the application layer occurs when the communication session at the application layer comprises at least one of an RTP and a SIP.

22. The system of claim 20, wherein modification of the application layer occurs if the translation occurs at the network layer or the modification occurs at the transport layer.

23. The system of claim 20, wherein modification of the application layer occurs if the translation occurs at the network layer and the modification occurs at the transport layer.

24. The method of claim 13, further comprising rerouting the communication session from the first communication node if the communication session has a modified SDP, wherein rerouting the communication session comprises modifying inbound predetermined routing information of the communication session for a destination node.