Method for Monitoring SIP Call-Flows by Tracking Message Transformation

• US 20080310312A1
• Filed: 06/15/2007
• Published: 12/18/2008
• Est. Priority Date: 06/15/2007
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Acharya, Arup, Sengupta, Bikram, Banerjee, Nilanjan
• Application Number:
  US11/764,011
• Publication Number:
  US 20080310312A1
• Time in Patent Office: Days
• US Class Current: 370/241
• CPC Class Codes: H04L 65/1076 Screening of IP real time communications, e.g. spam over Internet telephony [SPIT]
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]

Abstract

Systems and methods are provided for monitoring session initiation communications without modifying the operational code of the session initiation protocol proxy servers through which the messages that constitute a given communication are routed. The inbound and outbound versions of session initiation protocol messages are identified at a plurality of proxy servers. The inbound and outbound message versions are correlated at each proxy server using user-defined correlation rules that test conditions of the message headers. The correlated inbound and outbound message versions are then examined for transformations, and these transformations are used to determine the actions taken by the appropriate proxy server on that message. These actions are used to check the proper operation of both the proxy server and the session initiation protocol communication.

Claims

1. A method for monitoring session initiation protocol communications, the method comprising:

identifying a transformation in a session initiation protocol message produce by a session initiation proxy server through which the session initiation protocol message is routed;

using the identified transformation to deduce an action performed on the session initiation protocol message by the session initiation protocol proxy server; and

using the deduced action to verify proper operation of at least one of a session initiation protocol communication session containing the identified message and the session initiation protocol proxy server.

2. The method of claim 1, wherein the step of identifying the transformation further comprises:

identifying an inbound version of the session initiation protocol message at the session initiation protocol proxy server;

identifying an outbound version of the session initiation protocol message at the session initiation protocol proxy server; and

identifying differences between the incoming version and the outgoing version of the session initiation protocol message.

3. The method of claim 1, wherein:

the method further comprises identifying a state model for each one of a plurality of session initiation protocol communications; and

the step of using the deduced action further comprises using the deduced action in combination with the state model for the session initiation protocol communication session containing the identified message to infer a global state for at least one of the session initiation protocol communication session containing the identified message and the session initiation protocol proxy server.

4. A method for monitoring session initiation protocol communications, the method comprising:

identifying a plurality of transformations in a plurality of session initiation protocol messages produced by a session initiation protocol proxy server;

using the identified transformations to deduce actions performed on each one of the session initiation protocol messages by the session initiation protocol proxy server; and

using the deduced actions to verify proper operation of at least one of session initiation protocol communication sessions containing the identified messages and the session initiation protocol proxy server.

5. The method of claim 4, wherein the step of identifying the transformations further comprises:

identifying inbound versions of the session initiation protocol messages at the session initiation protocol proxy server;

identifying outbound versions of the session initiation protocol messages at the session initiation protocol proxy server; and

identifying differences between the inbound versions and the outbound versions of the session initiation protocol messages.

6. The method of claim 4, wherein the step of identifying the transformations further comprises:

identifying inbound versions of the session initiation protocol messages at the session initiation protocol proxy server;

identifying outbound versions of the session initiation protocol messages at the session initiation protocol proxy server; and

.

correlating inbound versions with outbound versions.

7. The method of claim 6, wherein the step of correlating the inbound and outbound version of the messages further comprises defining one or more correlation rule sets, each rule set comprising a plurality of correlation rules.

8. The method of claim 7, further comprising using at least one of the correlation rule sets to match each inbound session initiation protocol message with one of the outbound session initiation protocol messages.

9. The method of claim 7, further comprising modifying the correlation rules based upon type of session initiation protocol message or type of session initiation protocol communication session.

10. The method of claim 7, wherein each correlation rule comprises a conjunction of conditions to be used in assessing inbound and outbound versions of the messages and actions to be taken in accordance with the assessment of the inbound and outbound versions of the messages.

11. The method of claim 10, wherein the conditions operate on session initiation protocol headers associated with the inbound and outbound versions of the messages.

12. The method of claim 11, wherein the session initiation protocol headers comprise pre-defined session initiation protocol headers, user defined pseudo-headers, derived headers comprising components of other headers or combinations thereof.

13. A method for monitoring session initiation protocol communications, the method comprising:

identifying inbound versions of a plurality of session initiation protocol messages at a session initiation protocol proxy server;

identifying outbound versions of the session initiation protocol messages at the session initiation protocol proxy server;

correlating inbound versions with outbound versions;

identifying differences between correlated inbound versions and the outbound versions of the session initiation protocol messages;

using the identified differences to deduce actions performed on each one of the session initiation protocol messages by the session initiation protocol proxy server; and

using the deduced actions to verify proper operation of at least one of session initiation protocol communication sessions containing the identified messages and the session initiation protocol proxy server.

14. The method of claim 13, wherein the step of correlating the inbound and outbound version of the messages further comprises defining one or more correlation rule sets, each rule set comprising a plurality of correlation rules.

15. The method of claim 14, further comprising using at least one of the correlation rule sets to match each inbound session initiation protocol message with one of the outbound session initiation protocol messages.

16. The method of claim 14, further comprising modifying the correlation rules based upon type of session initiation protocol message or type of session initiation protocol communication session.

17. The method of claim 14, wherein each correlation rule comprises a conjunction of conditions to be used in assessing inbound and outbound versions of the messages and actions to be taken in accordance with the assessment of the inbound and outbound versions of the messages.

18. The method of claim 17, wherein the conditions operate on session initiation protocol headers associated with the inbound and outbound versions of the session initiation protocol messages.

19. A method for monitoring session initiation protocol communications, the method comprising:

identifying a plurality of transformations in a plurality of session initiation protocol messages produced by a session initiation protocol proxy server; and

using the identified transformations to verify proper operation of at least one of session initiation protocol communication sessions containing the identified messages and the session initiation protocol proxy server.