System and method providing for interoperability of session initiation protocol (SIP) and H.323 for secure realtime transport protocol (SRTP) session establishment

• US 20070201512A1
• Filed: 02/27/2006
• Published: 08/30/2007
• Est. Priority Date: 02/27/2006
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Mills, David, Fourie, Henry, Duffy, Joseph
• Granted Patent: US 7,764,669 B2
• Time in Patent Office: Days
• US Class Current: 370/467
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/104 in the network
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related

Abstract

A system and method providing for interoperability of SIP and H.323 for SRTP session establishment includes providing for interoperability of Session Initiation Protocol (SIP) and H.323 for Secure Realtime Transport Protocol session establishment include receiving a transmit key in a first protocol from a first endpoint. The transmit key is mapped from the first protocol to a second protocol and sent in the second protocol to a second endpoint to establish a secure communication session between the first endpoint and the second endpoint.

Claims

1. A method providing for interoperability of Session Initiation Protocol (SIP) and H.323 for Secure Realtime Transport Protocol session establishment, comprising:

receiving a transmit key in a first protocol from a first endpoint;

mapping the transmit key from the first protocol to a second protocol; and

sending the transmit key in the second protocol to a second endpoint to establish a secure communication session between the first endpoint and the second endpoint.

2. The method of claim 1, wherein the first endpoint is an H.323 endpoint and the first protocol is H.323, and the second endpoint is a SIP endpoint and the second protocol is SIP.

3. The method of claim 1, wherein the first endpoint is a SIP endpoint and the first protocol is SIP, and the second endpoint is an H.323 endpoint and the second protocol is H.323.

4. The method of claim 1, wherein mapping the transmit key comprises inserting the transmit key into a data structure associated with the second protocol.

5. The method of claim 1, further comprising providing authentication of the transmit key between the first endpoint and the second endpoint.

6. The method of claim 5, wherein providing authentication of the transmit key comprises:

encrypting the transmit key with a public key of the second endpoint; and

signing the transmit key with a private key of the first endpoint.

7. Logic providing for interoperability of Session Initiation Protocol (SIP) and H.323 for Secure Realtime Transport Protocol session establishment, the logic embodied in a medium and operable to:

receive a transmit key in a first protocol from a first endpoint;

map the transmit key from the first protocol to a second protocol; and

send the transmit key in the second protocol to a second endpoint to establish a secure communication session between the first endpoint and the second endpoint.

8. The logic of claim 7, wherein the first endpoint is an H.323 endpoint and the first protocol is H.323, and the second endpoint is a SIP endpoint and the second protocol is SIP.

9. The logic of claim 7, wherein the first endpoint is a SIP endpoint and the first protocol is SIP, and the second endpoint is an H.323 endpoint and the second protocol is H.323.

10. The logic of claim 7, wherein mapping the transmit key comprises inserting the transmit key into a data structure associated with the second protocol.

11. The logic of claim 7, further operable to provide authentication of the transmit key between the first endpoint and the second endpoint.

12. The logic of claim 11, wherein providing authentication of the transmit key comprises:

encrypting the transmit key with a public key of the second endpoint; and

signing the transmit key with a private key of the first endpoint.

13. A system providing for interoperability of Session Initiation Protocol (SIP) and H.323 for Secure Realtime Transport Protocol session establishment, comprising:

a first endpoint and a second endpoint operable to exchange media using a secure session, wherein the first endpoint communicates using a first protocol and the second endpoint communicates using a second protocol; and

a call manager operable to;

receive a transmit key in the first protocol from the first endpoint;

map the transmit key from the first protocol to the second protocol; and

send the transmit key in the second protocol to the second endpoint to establish a secure communication session between the first endpoint and the second endpoint.

14. The system of claim 13, wherein the first endpoint is an H.323 endpoint and the first protocol is H.323, and the second endpoint is a SIP endpoint and the second protocol is SIP.

15. The system of claim 13, wherein the first endpoint is a SIP endpoint and the first protocol is SIP, and the second endpoint is an H.323 endpoint and the second protocol is H.323.

16. The system of claim 13, wherein mapping the transmit key comprises inserting the transmit key into a data structure associated with the second protocol.

17. The system of claim 13, the call manager further operable to provide, authentication of the transmit key between the first endpoint and the second endpoint.

18. The system of claim 17, wherein providing authentication of the transmit key comprises:

encrypting the transmit key with a public key of the second endpoint; and

signing the transmit key with a private key of the first endpoint.

19. A system providing for interoperability of Session Initiation Protocol (SIP) and H.323 for Secure Realtime Transport Protocol session establishment, comprising:

means for receiving a transmit key in a first protocol from a first endpoint;

means for mapping the transmit key from the first protocol to a second protocol; and

means for sending the transmit key in the second protocol to a second endpoint to establish a secure communication session between the first endpoint and the second endpoint.