Telecommunication system and method for traversing an application layer gateway firewall during the establishment of an RTC communication connection between an RTC client and an RTC server

• US 10,382,402 B2
• Filed: 10/15/2015
• Issued: 08/13/2019
• Est. Priority Date: 10/21/2014
• Status: Expired due to Fees

• Current Assignee: RingCentral Incorporated
• Original Assignee: Unify GmbH & Co. KG (Atos SE)
• Inventors: Klaghofer, Karl, Stach, Thomas, Totzke, Jurgen
• Primary Examiner(s): Ho, Dao Q
• Application Number:
  US15/519,411
• Publication Number:
  US 20170237708A1
• Time in Patent Office: 1,398 Days
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 65/1023 Media gateways
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

The invention relates to a telecommunications assembly (10) and a method for traversing an application layer gateway firewall (40) during the establishment of an RTC communication connection between an RTC client (20) and an RTC server (30) using a proprietary RTC signalling protocol, wherein the firewall (40) has no specific knowledge of the proprietary RTC signalling protocol. The method comprises the following steps: the RTC client (20) and the RTC server (30) negotiate during the establishment of the RTC communication connection which of the ports (P1, P2, P3) of the firewall (40) are required for the data packets to be exchanged via the RTC communication connection, wherein they use at least one standardized message element as a component of the proprietary RTC signalling protocol, with which information relating to the ports to be used can be found; during the establishment of the RTC communication connection the firewall (40) detects, with the aid of the standardized message element, which of the ports (P1, P2, P3) of the firewall (40) are considered by the RTC client (20) and the RTC server (30) to be necessary for the data packets to be exchanged via the RTC communication connection; and the firewall (40) opens and closes the required ports (P1, P2, P3) in a dynamic manner according to the result of the negotiation.

Claims

1. A method for traversing an application layer gateway (ALG) firewall during establishment of a real-time communication (RTC) communication connection between an RTC client and an RTC server using a proprietary RTC signaling protocol, wherein the firewall has no specific knowledge of the proprietary RTC signaling protocol, comprising:

the RTC client and the RTC server negotiating, during establishment of the RTC communication connection, which ports of the ALG firewall are required for data packets to be exchanged via the RTC communication connection, the RTC client and the RTC server using at least one standardized message element of the proprietary RTC signaling protocol to include items of information relating to the ports during the negotiating so that the ALG firewall, during establishment of the RTC communication connection, detects which of the ports of the ALG firewall were negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the RTC communication connection for opening and closing the ports of the ALG firewall even though the ALG firewall has no specific knowledge of the proprietary RTC signaling protocol, wherein exchanging of signaling protocol variations takes place as part of an upgrade procedure from a Hypertext Transfer Protocol (HTTP) connection to a WebSockets connection;

the ALG firewall dynamically opening and closing the ports for the RTC communication connection in response to detection of the ports of the ALG firewall that were negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the at least one standardized message element of the proprietary RTC signaling protocol utilized by the RTC client and the RTC server during the negotiating.

2. The method of claim 1, wherein a defined signaling protocol variation is used for negotiating the necessary ports, the method further comprising exchanging the defined signaling protocol variation via RTC signaling after a signaling-transport connection is established between the RTC client and the RTC server.

3. The method of claim 1, wherein the exchange of signaling protocol variations occurs through a defined field in a header of an add-on in a WebSockets protocol.

4. The method of claim 1, wherein the exchange of signaling protocol variations takes place using a proprietary protocol.

5. The method of claim 1, comprising:

the RTC client and the RTC server establishing a Hypertext Transfer Protocol (HTTP) connection and subsequently adjusting the HTTP connection to a Web Sockets connection prior to negotiating the ports of the firewall needed for transmission of the data packets.

6. The method of claim 5, comprising:

the RTC client downloading javascript data from the RTC server before adjustment of the HTTP connection to the Web Sockets connection occurs.

7. The method of claim 6, wherein the data packets are media data packets.

8. The method of claim 7, wherein the media data packets are for voice over internet protocol (VoIP) or video over IP.

9. The method of claim 7, wherein the adjusting the HTTP connection to the Web Sockets connection prior to negotiating the ports of the firewall needed for transmission of the data packets includes use of a WebRTCSig handshake to adjust the HTTP connection to the Web Sockets connection.

10. A non-transitory computer readable medium having a computer program stored thereon, the computer program defining a method configured to facilitate establishment of a real-time communication (RTC) connection between an RTC client and an RTC server in which a application layer gateway (ALG) firewall has no knowledge of a proprietary RTC signaling protocol usable by the RTC client and the RTC server to exchange proprietary RTC signaling to negotiate which ports of the ALG firewall are needed for data packets to be exchanged via the RTC communication connection, the proprietary RTC signaling having at least one standardized message element, wherein exchanging of signaling protocol variations takes place as part of an upgrade procedure from a Hypertext Transfer Protocol (HTTP) connection to a WebSockets connection, the method comprising:

the ALG firewall dynamically opening and closing the ports for the RTC communication connection in response to detection of the ports of the ALG firewall that were negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the at least one standardized message element of the proprietary RTC signaling protocol utilized by the RTC client and the RTC server during the negotiating.

11. A telecommunication system for traversing an application layer gateway firewall during the establishment of a real-time communication (RTC) connection between an RTC client and an RTC server using a proprietary RTC signaling protocol, wherein the firewall has no specific knowledge of the proprietary RTC signaling protocol, comprising:

an RTC client,

an RTC server, and

a firewall with multiple ports and comprising hardware, the hardware comprising a non-transitory computer readable medium,

wherein the firewall has a control device for facilitating performance of a method, the method comprising;

the RTC client and the RTC server negotiating, during establishment of the RTC communication connection, which ports of the ALG firewall are required for data packets to be exchanged via the RTC communication connection, the RTC client and the RTC server using at least one standardized message element of the proprietary RTC signaling protocol to include items of information relating to the ports during the negotiating so that the ALG firewall, during establishment of the RTC communication connection, detects which of the ports of the ALG firewall were negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the RTC communication connection for opening and closing the ports of the ALG firewall even though the ALG firewall has no specific knowledge of the proprietary RTC signaling protocol, wherein exchanging of signaling protocol variations takes place as part of an upgrade procedure from a Hypertext Transfer Protocol (HTTP) connection to a WebSockets connection;

the ALG firewall dynamically opening and closing the ports for the RTC communication connection in response to detection of the ports of the ALG firewall that were negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the at least one standardized message element of the proprietary RTC signaling protocol utilized by the RTC client and the RTC server during the negotiating.

12. A communication apparatus comprising:

an application layer gateway (ALG) firewall comprising a processor connected to a non-transitory computer readable medium, the ALG firewall configured to establish a real-time communication (RTC) connection between an RTC client and an RTC server;

the ALG firewall having no knowledge of a proprietary RTC signaling protocol usable by the RTC client and the RTC server to exchange proprietary RTC signaling to negotiate which ports of the ALG firewall are needed for data packets to be exchanged via the RTC communication connection, the proprietary RTC signaling having at least one standardized message element, wherein exchanging of signaling protocol variations takes place as part of an upgrade procedure from a Hypertext Transfer Protocol (HTTP) connection to a WebSockets connection;

the ALG firewall configured to utilize the at least one standardized message element of the proprietary RTC signaling exchanged between the RTC client and the RTC server to negotiate the ports needed for exchanging data packets during establishment of the RTC communication connection to detect which of the ports of the ALG firewall are negotiated as required for the data packets to be exchanged between the RTC server and the RTC client via the RTC communication connection and dynamically opening and closing the ports of the ALG firewall in response to detection of the ports via the at least one standardized message element of the proprietary RTC signaling exchanged between the RTC client and the RTC server during establishment of the RTC communication connection even though the ALG firewall has no specific knowledge of the proprietary RTC signaling protocol.

13. The communication apparatus of claim 12, comprising:

the RTC client or the RTC server.

14. The communication apparatus of claim 12, comprising:

the RTC client and the RTC server.

15. The communication apparatus of claim 14, wherein the data packets to be exchanged via the RTC communication connection are media data packets and the RTC client is a webRTC client.

16. The communication apparatus of claim 14, wherein the RTC client and the RTC server are configured to establish a Hypertext Transfer Protocol (HTTP) connection and subsequently adjust the HTTP connection to a Web Sockets connection prior to negotiating the ports of the firewall needed for transmission of the data packets.

17. The communication apparatus of claim 16, wherein subsequent adjustment of the HTTP connection to the Web Sockets connection occurs after the RTC client downloads javascript data from the RTC server.

18. The communication apparatus of claim 17, wherein the ports are user datagram protocol (UDP) ports.