Transfer of information in a communication network with a verified QoS

• US 7,457,627 B2
• Filed: 01/30/2002
• Issued: 11/25/2008
• Est. Priority Date: 03/13/2001
• Status: Expired due to Term

• Current Assignee: Q3 Networking LLC (IP Edge LLC)
• Original Assignee: Siemens AG
• Inventors: Knaebchen, Andreas, Liebhart, Rainer
• Primary Examiner(s): Nguyen, Duc
• Assistant Examiner(s): PHUONG, DAI
• Application Number:
  US10/471,456
• Publication Number:
  US 20040142697A1
• Time in Patent Office: 2,491 Days
• Field of Search: 455405-406, 455/411, 455/422.11, 455/454, 455/452.2, 455/410, 709/223, 370/468
• US Class Current: 455/452.2
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/724 at intermediate nodes, e.g. resource reservation protocol [RSVP]
• CPC Class Codes: H04L 47/781 Centralised allocation of resources
• CPC Class Codes: H04L 47/805 QOS or priority aware
• CPC Class Codes: H04L 47/822 Collecting or measuring resource availability data
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 7/006 Networks other than PSTN/ISDN providing telephone service, e.g. Voice over Internet Protocol (VoIP) , including next generation networks with a packet-switched transport layer H04L65/00 takes precedence; aspects not specific to the type of network H04M3/00; special services in those networks H04M3/42

Abstract

In a communication network, which includes a call control level CCL, a resource control level RCL and at least one terminal A assigned to data transfer, a QoS requirement RQ determined for a data transfer is verified at expense at call control level CCL. An encrypted token T is then created from this and transferred via terminal A to resource control level RCL. This latter verifies an incoming QoS requirement RQ from terminal A only by means of the encrypted token T. If successful, the communication network is configured so that the data is transferred with the QoS verified according to the invention. The invention allows the efficient, secure and correct provision of QoS in integrated voice and data networks. In particular extensive modifications to existing routers are avoided at resource control level RCL. The regularly repeated transfer of tokens T also supports consistent termination of the QoS provided and secure and correct billing of the data transfer.

Claims

1. A method for transferring data with a verified QoS in a communication network, which includes a call control level, a resource control level and at least one terminal assigned to data transfer, comprising:

determining a QoS requirement for data transfer and verified at call control level;

creating and transferring, taking into account the QoS requirement verified at the call control level, at least one encrypted token to the terminal;

transferring the verified QoS requirement and the encrypted token to the resource control level from the terminal;

decrypting, at the resource control level, the encrypted token, and verifying the QoS requirement using the decrypted token; and

configuring the communication network taking into account the QoS requirement verified, such that the data is transferred with the verified QoS.

2. The method according to claim 1, wherein the call control level repeatedly transfers the token to the terminal, which is forwarded from there to the resource control level.

3. The method according to claim 1, wherein data of variable value is incorporated in the encrypted token.

4. The method according to claim 1, wherein the encrypted token is transferred between the terminal and the call control level and/or between the terminal and the resource control level in existing signaling messages.

5. The method according to claim 1, wherein accounting for the data transfer is started by the call control level on successful verification of the QoS requirement.

6. The method according to claim 5, wherein accounting and the transfer of encrypted tokens to the terminal is terminated by the call control level after completion of the data transfer.

7. The method according to claim 1, wherein encryption and decryption are carried out using a symmetrical secret.

9. The method according to claim 1, wherein the at least one terminal comprises means for implementing the method.

8. A computer readable medium storing a computer program, which is executable by a processor, comprising:

determining a QoS requirement for data transfer and verified at a call control level;

creating and transferring, taking into account the QoS requirement verified at the call control level, at least one encrypted token to the terminal;

transferring the verified QoS requirement and the encrypted token to a resource control level from the terminal;

decrypting, at the resource control level, the encrypted token, and verifying the QoS requirement using the decrypted token; and

configuring the communication network taking into account the QoS requirement verified, such that the data is transferred with the verified QoS.

10. A system for transferring data with a verified QoS in a communication network, which includes a call control level, a resource control level and at least one terminal assigned to data transfer, comprising:

determining a QoS requirement for data transfer and verified at the call control level;

creating and transferring, taking into account the QoS requirement verified at the call control level, at least one encrypted token to the terminal;

transferring the verified QoS requirement and the encrypted token to the resource control level from the terminal;

decrypting, at the resource control level, the encrypted token, and verifying the QoS requirement using the decrypted token; and

configuring the communication network taking into account the QoS requirement verified, such that the data is transferred with the verified QoS.

11. A method for transmission of information with a verified QoS in a communications network, having a QoS request, a Call Control Level for verifying whether a QoS request may be issued, a Resource Control Level for configuration of the network such that the information can be transmitted in the network with the requested QoS, a functional separation of the call and resource control levels, and at least one end point assigned to the transmission of information, comprising:

determining the QoS request for transmission of information;

in the Call Control Level;

verifying whether the QoS request may be issued;

forming at least one encoded token while considering the verified QoS request;

transmitting the token to the end point;

from the end point;

transmitting the verified QoS and the encoded token to the Resource Control Level;

in the Resource Control Level;

decoding the token;

checking correctness of the verified QoS request using the decoded token;

configuring the communications network while considering the checked QoS request, such that the information is transmitted with the verified QoS.

12. A computer readable medium storing a computer program for transmission of information with a verified QoS in a communications network, having a QoS request, a Call Control Level for verifying whether a QoS request may be issued, a Resource Control Level for configuration of the network such that the information can be transmitted in the network with the requested QoS, a functional separation of the call and resource control levels, and at least one end point assigned to the transmission of information, the computer program having a program to execute the following:

determining the QoS request for transmission of information;

in the Call Control Level;

verifying whether the QoS request may be issued;

forming at least one encoded token while considering the verified QoS request;

transmitting the token to the end point;

from the end point;

transmitting the verified QoS and the encoded token to the Resource Control Level;

in the Resource Control Level;

decoding the token;

checking correctness of the verified QoS request using the decoded token;

configuring the communications network while considering the checked QoS request, such that the information is transmitted with the verified QoS.