Telecommunications data conferencing platform having secure firewall wherein access is restricted to messages originating from server but conference data pass freely

• US 6,668,288 B1
• Filed: 07/14/2000
• Issued: 12/23/2003
• Est. Priority Date: 02/13/1998
• Status: Expired due to Term

• Current Assignee: British Telecommunications PLC (BT Group PLC)
• Original Assignee: British Telecommunications PLC (BT Group PLC)
• Inventors: Midwinter, Timothy, Daniels, Ian Geoffrey
• Primary Examiner(s): Gaffin, Jeffrey
• Assistant Examiner(s): PEYTON, TAMMARA R
• Application Number:
  US09/600,305
• Time in Patent Office: 1,257 Days
• Field of Search: 710/1, 710/29, 710/34, 710/33, 712/31, 713/200, 713/201, 709/204, 709/208
• US Class Current: 710/29
• CPC Class Codes: H04L 12/1818 Conference organisation arrangements, e.g. handling schedules, setting up parameters needed by nodes to attend a conference, booking network resources, notifying involved parties
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04M 15/00 Arrangements for metering, time-control or time indication ; Metering, charging or billing arrangements for voice wireline or wireless communications, e.g. VoIP

Abstract

A telecommunications data conferencing platform has a secure zone and a partly secure zone connected by a secure firewall. The secure zone contains a master data server, a billing system a reservation system and an audio bridge connected to the firewall. The partly secure zone contains a pair of slave data servers. The first slave data server can be connected through a public firewall to the public Internet. The first slave data server can receive incoming calls from the public switched telecommunications network via a bank of modems. The secure firewall restricts the passage of messages from the partly secure zone to the secure zone to messages which originate directly in the partly secure zone but allows the passage of conference data. Thus, unauthorised parties are unable to gain access to the reservation system or the master data server. In order to establish a conference, the reservation system creates a conference on the master data server. The master data server then invites the slave data server to join the conference. The slave data servers then permit participants to join the conference.

Claims

1. A data conferencing platform for providing a data conference between participants, said data conferencing platform having first and second zones, said data conferencing platform comprising:

a reservation system located in the first zone;

a data server located in the second zone and arranged to be connected to a communications network; and

an interface between the first and second zones, the reservation system being connected through the interface to the data server;

the reservation system being arranged to make conference reservations;

the data server being arranged to receive details of a data conference from the reservation system and to pass conference data between communications terminals used by participants to a data conference;

the interface between the first and second zone being arranged to restrict the passage of messages from the second zone to the first zone to messages which originate directly in the second zone but allow the passage of conference data;

a master data server located in the first zone and connected to the reservation system and the interface between the first and second zones, the data server in the second zone being a slave data server, the master data server being arranged to receive details of a conference from the reservation system and to pass the details to the slave data server; and

at least one other data server in the second zone, each data server in the second zone being a slave data server, the master data server being further arranged to pass conferencing data between the at least two slave data servers.

2. A data conferencing platform as claimed in claim 1, in which the master data server only passes the details of a conference received from the reservation system to a selected one or more of the at least two slave data servers.

3. A data conferencing platform as claimed in claim 1 further comprising a request handling server located in the second zone and connected to the interface between the first and second zones, the request handling server being arranged to receive first request messages for a data conference, to generate consequent second request messages for the data conference and to pass the second request messages to the reservation system.

4. A data conferencing platform as claimed in claim 3 in which the request handling server is arranged to generate the consequent second request messages using a different messaging protocol from that in which the first request messages were received.

5. A data conferencing platform as claimed in claim 1 in which at least one slave data server is arranged to be connected to a circuit switched communications network.

6. A data conferencing platform as claimed in claim 5 in which at least one slave data server is arranged to be connected to a circuit switched communications network.

7. A data conferencing platform for providing a data conference between participants, said data conferencing platform having first and second zones, said data conferencing platform comprising:

a reservation system located in the first zone;

a data server located in the second zone and arranged to be connected to a communications network; and

an interface between the first and second zones, the reservation system being connected through the interface to the data server;

the reservation system being arranged to make conference reservations;

the data server being arranged to receive details of a data conference from the reservation system and to pass conference data between communications terminals used by participants to a data conference;

the interface between the first and second zone being arranged to restrict the passage of messages from the second zone to the first zone to messages which originate directly in the second zone but allow the passage of conference data;

a master data server located in the first zone connected to the reservation system and the interface between the first and second zones, the data server in the second zone being a slave data server, the master data server being arranged to receive details of a conference from the reservation system and to pass the details to the slave data server; and

in which the master data server is arranged to make an outgoing call though a public circuit switched telecommunications network to a slave data server connected to a private packet switched telecommunications network, said master data server being arranged to refuse in-coming calls.

8. A conferencing hub operable to interconnect a plurality of participants in a data conference, said conferencing hub comprising:

a reservation system arranged in operation to store conference reservation data;

a data server;

an interface between said reservation system and said data server;

wherein, at the time of said data conference, said reservation system is arranged in operation to pass said conference reservation data through said interface to said data server and said data server is arranged in operation to pass conference data between said participants; and

wherein, said interface is arranged in operation to restrict access to said reservation system to messages originating from said data server but to allow conference data to pass freely.

9. A conferencing hub as claimed in claim 8, further comprising:

a master data server connected to said reservation system and said interface;

wherein said data server comprises a slave data server; and

wherein, at the time of said data conference, said master data server is arranged in operation to receive said conference reservation data and to pass said conference reservation data to said slave data server.

10. A conferencing hub as claimed in claim 9, further comprising:

at least one other slave data server; and

wherein said master data server is further arranged in operation to pass conference data between said slave data servers.

11. A conferencing hub as claimed in claim 10, wherein said master data server is arranged in operation to only pass said conference reservation data to a selected one or more of said slave data servers.

12. A conferencing hub as claimed in claim 8 further comprising:

a request handling server connected to said interface; and

wherein said request handling server is arranged in operation to receive a first request messages for said data conference from one of said participants, generate a consequent second request message for said data conference and pass said consequent second request message to said reservation system.

13. A conferencing hub as claimed in claim 12, wherein said request handling server is arranged in operation to generate said consequent second request messages using a different messaging protocol from that in which the first request message was received.

14. A conferencing hub as claimed in claim 9, wherein at least one slave data server is arranged in operation to be connected to a packed switched communications network.

15. A conferencing hub as claimed in claim 14, wherein at least one slave data server is arranged in operation to be connected to a circuit switched communications network.

16. A conferencing hub as claimed in claim 8, wherein said master data server is arranged in operation to make an outgoing call though a public circuit switched telecommunications network to a slave data server connected to a private packet switched telecommunications network, said master data server being arranged in operation to refuse in-coming calls.

17. A method of data conferencing, said method comprising the steps of:

sending a reservation for a data conference to a reservation system of a data conferencing hub;

storing conference reservation data relating to said reservation at said reservation system;

operating said reservation system, at the time of said data conference, to pass said conference reservation data through an interface to a data server;

operating said data server to pass conference data between participants in said data conference; and

operating said interface to restrict access to said reservation system to messages originating from said data server but to allow conference data to pass freely.