METHOD OF COMMUNICATING PACKET MULTIMEDIA TO RESTRICTED ENDPOINTS

• US 20110158239A1
• Filed: 03/08/2011
• Published: 06/30/2011
• Est. Priority Date: 11/20/2003
• Status: Abandoned Application

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Mohaban, Shai
• Application Number:
  US13/043,360
• Publication Number:
  US 20110158239A1
• Time in Patent Office: Days
• US Class Current: 370/392
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A method, performed in a network element, for communicating packet multimedia data between a first endpoint and a second endpoint, the method comprising the machine-implemented steps of receiving an outbound multimedia data packet; determining if the outbound multimedia data packet originated from a first endpoint that is logically behind a security device; determining and storing information identifying a logical pinhole in the security device, wherein the logical pinhole is associated with expected inbound multimedia data packets directed to the first endpoint; performing an action that keeps the logical pinhole open during all of a communication session between the first endpoint and the second endpoint; and forwarding inbound multimedia data packets directed from the second endpoint to the first endpoint via the logical pinhole.

Claims

1. A method, performed in a network element, for communicating packet multimedia data between a first endpoint and a second endpoint, the method comprising the machine-implemented steps of:

determining that the first endpoint is receiving a unidirectional call;

modifying signaling messages of the unidirectional call so that signaling communications of the unidirectional call become bi-directional;

forwarding the modified signaling messages toward their destination;

receiving an outbound multimedia signaling packet that is responsive to the modified signaling messages from the first endpoint;

determining whether the first endpoint is logically behind a security device;

determining and storing information from the outbound multimedia signaling packet that identifies a logical pinhole in the security device, wherein the logical pinhole is associated with expected inbound multimedia data packets directed to the first endpoint;

performing an action that keeps the logical pinhole open for future communication with the first endpoint; and

forwarding inbound multimedia signaling messages directed towards the first endpoint via the logical pinhole.

2. The method of claim 1, wherein the security device is selected from the group consisting of a network address translator, a firewall, and a network address translator and a firewall.

3. The method of claim 1, further comprising:

directing one or more media controllers to eliminate media packets for the communication arriving from the first endpoint.

4. The method of claim 1, wherein the modified signaling messages cause the first endpoint to send the outbound multimedia signaling packet.

5. The method of claim 1, further comprising:

determining that the first endpoint permits adding a software component that generates periodic messages for keeping the logical pinhole open;

installing, with the network element, the software component on the first endpoint;

activating the software component to generate periodic messages toward a signaling controller in order to keep the logical pinhole open; and

sending a command to the first endpoint to cause the software component to modify a frequency at which it generates periodic messages.

6. An apparatus for communicating packet multimedia data between a first endpoint and a second endpoint, the apparatus comprising:

a processor;

a communication interface that receives a signaling messages for a unidirectional call to the first endpoint,

wherein the processor modifies signaling messages of the unidirectional call so that signaling communications of the unidirectional call become bi-directional,

wherein the communication interface forwards the modified signaling messages toward their destination,

wherein the communication interface receives an outbound multimedia signaling packet that is responsive to the modified signaling messages from the first endpoint,

wherein the processor determines whether the first endpoint is logically behind a security device, and

wherein the processor determines information from the outbound multimedia signaling packet that identifies a logical pinhole in the security device, wherein the logical pinhole is associated with expected inbound multimedia data packets directed to the first endpoint;

a storage device that stores the information identifying the logical pinhole in the security device,

wherein the processor performs an action that keeps the logical pinhole open for future communication with the first endpoint, and

wherein the processor forwards inbound multimedia signaling messages directed towards the first endpoint via the logical pinhole.

7. The apparatus of claim 6, further comprising:

wherein the processor directs one or more media controllers to eliminate media packets for the communication arriving from the first endpoint.

8. The apparatus of claim 6, wherein the processor modifies signaling messages of the unidirectional call to cause the first endpoint to send the outbound multimedia signaling packet.

9. The apparatus of claim 6,

wherein the processor determines that the first endpoint permits adding a software component that generates periodic messages for keeping the logical pinhole open,

wherein the processor outputs a communication via the communication interface that installs the software component on the first endpoint,

wherein the processor outputs a communication via the communication interface that activates the software component to generate periodic messages toward a signaling controller in order to keep the logical pinhole open, and

wherein the communication interface sends a command to the first endpoint to cause the software component to modify a frequency at which it generates periodic messages.

10. A non-transitory computer-readable medium comprising instructions for causing a programmable processor to:

determine that a first endpoint is receiving a unidirectional call from a second endpoint;

modify signaling messages of the unidirectional call so that signaling communications of the unidirectional call become bi-directional;

forward the modified signaling messages toward their destination;

receive an outbound multimedia signaling packet that is responsive to the modified signaling messages from the first endpoint;

determine whether the first endpoint is logically behind a security device;

determine and store information from the outbound multimedia signaling packet that identifies a logical pinhole in the security device, wherein the logical pinhole is associated with expected inbound multimedia data packets directed to the first endpoint;

perform an action that keeps the logical pinhole open for future communication with the first endpoint; and

forward inbound multimedia signaling messages directed towards the first endpoint via the logical pinhole.

11. The non-transitory computer-readable medium of claim 10, wherein the instructions further cause the programmable processor to:

direct one or more media controllers to eliminate media packets for the communication arriving from the first endpoint.

12. The non-transitory computer-readable medium of claim 10, wherein the instructions further cause the programmable processor to:

modify signaling messages of the unidirectional call to cause the first endpoint to send the outbound multimedia signaling packet.

13. The non-transitory computer-readable medium of claim 10, wherein the instructions further cause the programmable processor to:

determine that the first endpoint permits adding a software component that generates periodic messages for keeping the logical pinhole open;

install the software component on the first endpoint;

activate the software component to generate periodic messages toward a signaling controller in order to keep the logical pinhole open; and

send a command to the first endpoint to cause the software component to modify a frequency at which it generates periodic messages.