Mechanism for implementing Voice Over IP telephony behind network firewalls

• US 7,009,984 B2
• Filed: 10/24/2003
• Issued: 03/07/2006
• Est. Priority Date: 06/06/2002
• Status: Expired due to Fees

• Current Assignee: Clinton Watson
• Original Assignee: Clinton Watson
• Inventors: Watson, Clinton
• Primary Examiner(s): VINCENT, DAVID ROBERT
• Application Number:
  US10/693,107
• Publication Number:
  US 20040085952A1
• Time in Patent Office: 865 Days
• Field of Search: 370401- 2, 370351- 4, 370409-411, 370449-451, 370458- 9, 370460- 3, 370464- 6, 370/469, 370473-475, 709225-230, 709/238, 713200- 1, 713100-181
• US Class Current: 370/401
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2564 for a higher-layer protocol, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1046 Call controllers; Call servers
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related

Abstract

According to one embodiment, a network is disclosed. The network includes a first Voice Over Internet Protocol (VOIP) station a first communication medium coupled to the VOIP station a router, coupled to the first communication, that includes a network address translation (NAT) firewall, a second communication medium coupled to the router and a public proxy/gatekeeper (PPG) coupled to the second communication. The PPG masquerades un-translated NAT IP addresses received from the first VOIP station.

Claims

1. A network comprising:

one or more stations implementing a Voice Over Internet Protocol (VOIP);

a network firewall coupled to a first station; and

a public proxy/gatekeeper (PPG), coupled to the firewall, including;

a masquerade module to translate private IP addresses received from each of the one or more stations to a public address associated with a private network to which the one or more stations are coupled by comparing a private IP address embedded within a data portion of each received packet to a source IP address in a header of each received packet and masquerading the private IP address if the embedded private IP.

2. The network of claim 1 wherein the PPG further comprises a port assignment module to assign a dedicated port to each of the one or more stations to implement VOIP communications from behind the firewall.

3. The network of claim 2 wherein the port assignment module calculates an index value used to assign the dedicated port for each of the one or more stations.

4. The network of claim 3 wherein the index value is calculated by assigning a value corresponding to the number of stations coupled behind the firewall.

5. The network of claim 3 wherein the index value is calculated by assigning a value corresponding to the least significant byte of the private IP address associated with each of the one or more stations.

6. The network of claim 3 wherein the PPG further comprises a registration module to receive a media access control (MAC) address for each of the one more stations during a registration phase.

7. The network of claim 6 wherein the registration module transmits the index value to each of the one or more stations to confirm registration.

8. A system comprising a public proxy/gatekeeper (PPG) comprising a masquerade module to translate private IP addresses received from one or more Voice Over Internet Protocol (VOIP) stations to a public address associated with a private network to which the one or more stations are coupled by comparing a private IP address embedded within a data portion of each received packet to a source IP address in a header of each received packet and masquerading the private IP address if the embedded private IP.

9. The PPG of claim 8 further comprising a port assignment module to assign a dedicated port to each of the one or more stations to implement VOIP communications from behind a firewall coupled to the one or more stations.

10. The PPG of claim 9 wherein the port assignment module calculates an index value used to assign the dedicated port for each of the one or more stations.

11. The PPG of claim 10 wherein the index value is calculated by assigning a value corresponding to the number of stations coupled behind the firewall.

12. The PPG of claim 10 wherein the index value is calculated by assigning a value corresponding to the least significant byte of a private IP address associated with each of the one or more stations.

13. The PPG of claim 10 further comprising a registration module to receive a media access control (MAC) address for each of the one more stations during a registration phase.

14. The PPG of claim 13 wherein the registration module transmits the index value to each of the one or more stations to confirm registration.

15. A method comprising:

receiving data at a public proxy/gatekeeper (PPG) from a station implementing a Voice Over Internet Protocol (VOIP);

comparing a private IP address embedded within a data portion of a data packet received from the station to a source IP address in a header portion of the data packet; and

translating the private IP address received from the station to a public address associated with a private network to which the station is coupled.

16. The method of claim 15 further comprising assigning a dedicated port to the stations.