Highly adaptable proxy traversal and authentication

• US 7,577,156 B2
• Filed: 04/13/2006
• Issued: 08/18/2009
• Est. Priority Date: 04/13/2006
• Status: Active Grant

• Current Assignee: directPacket Research, Inc.
• Original Assignee: directPacket Research, Inc.
• Inventors: Signaoff, Justin S., Riley, Edward M. III, Opsahl, Tom W., Signaoff, Christopher S.
• Primary Examiner(s): Pham; Chi H
• Assistant Examiner(s): HYUN, SOON D
• Application Number:
  US11/404,045
• Publication Number:
  US 20070242680A1
• Time in Patent Office: 1,223 Days
• Field of Search: None
• US Class Current: 370/401
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/765 intermediate

Abstract

Systems and methods are disclosed for transporting multimedia protocol traffic over a proxy server using a commonly-used proxy protocol. Multimedia protocol traffic from a first endpoint is received and then converted. The converted data is then transmitted using a commonly-used protocol across a network. The traffic is received and reconverted to the original multimedia protocol. The reconverted data is then transmitted to a second endpoint. By using a commonly-used protocol to transmit traffic between endpoints, proxy servers between each endpoint may be traversed without changing any of their settings.

Claims

1. A method for communication through a proxy server using a multimedia protocol, said method comprising:

receiving a plurality of packets of data from a first endpoint in a multimedia protocol;

converting said plurality of packets into a commonly-used protocol;

establishing a connection with said proxy server using said commonly-used protocol;

receiving at said proxy server said plurality of packets in said commonly-used protocol; and

transmitting said plurality of packets to a second endpoint in said commonly-used protocol.

2. The method of claim 1, further comprising:

receiving specially formed messages in said commonly-used protocol to control transmission of said plurality of packets.

3. The method of claim 1, further comprising:

encrypting said data in said multimedia protocol prior to said converting.

4. The method of claim 3, wherein said encrypting is according to one of:

an Advanced Encryption Standard (AES) 128-bit algorithm;

a Triple Data Encryption Standard (TDES) algorithm;

or

a Skipjack algorithm.

5. The method of claim 1, wherein said multimedia protocol comprises one of:

SIP, H.323, VoIP, Skype, and IAX.

6. The method of claim 1, wherein said commonly-used protocol comprises one of:

HTTP. HTTPS, FTP, POP3, SMTP, and IMAP.

7. The method of claim 1, further comprising:

qualifying said plurality of packets, wherein said qualifying comprises;

registering an endpoint;

determining whether said plurality of packets originated from said registered endpoint; and

allowing further transmission of said plurality of packets based on said determining.

8. The method of claim 7 wherein said determining is implemented by use of an authentication protocol.

9. The method of claim 8 wherein said authentication protocol comprises one of:

base64 encoding;

NT LAN MANAGER™

(NTLM™

); and

INTEGRATED WINDOWS AUTHENTICATION™

(IWA™

).

10. A system comprising:

a first network device, comprising;

an interface for receiving a plurality of packets in a multimedia protocol;

a first conversion utility for converting said plurality of packets into a commonly-used proxy protocol;

a second interface for transmitting said plurality of packets using said commonly-used proxy protocol; and

a proxy server, comprising;

a third interface for receiving said plurality of packets using said commonly-used proxy protocol;

an authentication utility for authenticating said first network device; and

a fourth interface for transmitting said plurality of packets using said commonly-used proxy protocol;

wherein said authentication utility controls said transmitting on said fourth interface.

11. The system of claim 10, further comprising:

a second network device comprising;

a fifth interface for receiving said plurality of packets in said commonly-used proxy protocol;

a second conversion utility for converting said plurality of packets from said commonly-used proxy protocol to said multimedia protocol;

a sixth interface for distributing each of said plurality of packets using said multimedia protocol; and

wherein said proxy server is traversed by using said commonly-used proxy protocol.

12. The system of claim 11, wherein said first and second network devices exchange specially formed commonly-used proxy protocol messages to control said transmission of said plurality of packets.

13. The system of claim 10, further comprising:

an encryption application in said first network device for encrypting said plurality of packets.

14. The system of claim 13, further comprising:

a decryption application in said second network device for decrypting said encrypted plurality of packets prior to said distributing.

15. The system of claim 13, wherein said encrypting is according to one of:

an Advanced Encryption Standard (AES) 128-bit algorithm;

a Triple Data Encryption Standard (TDES) algorithm;

or

a Skipjack algorithm.

16. The system of claim 10, wherein said multimedia protocol comprises one of:

SIP, H.323, VoIP, Skype, and IAX.

17. The system of claim 10, wherein said commonly-used proxy protocol comprises on of:

HTTP. HTTPS, FTP, POP3, SMTP, and IMAP.

18. The system of claim 10, wherein said authenticating is based on identification information in said plurality of packets.

19. The system of claim 10, wherein said authentication utility comprises one of:

base64encoding;

NT LAN MANAGER™

(NTLM™

); and

INTEGRATED WINDOWS AUTHENTICATION™

(IWA™

).

20. A method comprising:

receiving at a first network device a plurality of packets of data in multimedia protocol;

converting said plurality of packets into a commonly-used protocol;

establishing a connection with a proxy server using said commonly-used protocol;

transmitting said plurality of packets to said proxy server in said commonly-used protocol;

receiving at a second network device said plurality of packets in said commonly-used protocol; and

converting said plurality of packets in said commonly-used protocol into said multimedia protocol.

21. The method of claim 20, further comprising:

transmitting specially formed messages in said commonly-used protocol to control transmission of said plurality of packets from said proxy server.

22. The method of claim 20, further comprising:

encrypting said plurality of packets prior to said converting said plurality of packets into a commonly-used protocol.

23. The method of claim 22 further comprising:

decrypting said encrypted plurality of packets.

24. The method of claim 22, wherein said encrypting is according to one of:

an Advanced Encryption Standard (AES) 128-bit algorithm;

a Triple Data Encryption Standard (TDES) algorithm;

or

a Skipjack algorithm.

25. The method of claim 20, wherein said multimedia protocol comprises one of:

SIP, H.323, VoIP, Skype, and IAX.

26. The method of claim 20, wherein said commonly-used protocol comprises one of:

HTTP, HTTPS, FTP, POP3, SMTP, and IMAP.

27. The method of claim 20, further comprising:

authenticating by said proxy server of said plurality of packets in said commonly-used protocol;

transmitting, in said commonly-used protocol, from said proxy server said plurality of packets received from the first network device;

wherein;

said transmitting by said proxy server is controlled by said authenticating; and

said authenticating is based on identification information within said plurality of packets.

28. The method of claim 27, wherein said authenticating is implemented using one or more of:

base64 encoding;

NT LAN MANAGER™

(NTLM™

); and

INTEGRATED WINDOWS AUTHENTICATION™

(IWA™

).

29. A system comprising:

a first network device, comprising;

an interface for receiving a plurality of packets in a multimedia protocol;

a first conversion utility for converting said plurality of packets into a commonly-used proxy protocol; and

a second interface for transmitting said plurality of packets via a communication network using said commonly-used proxy protocol, wherein said commonly-used proxy protocol is a protocol that is commonly recognized by a receiving proxy server as a valid and authorized protocol.

30. The system of claim 29 wherein said transmitted plurality of packets is authenticable by said receiving proxy server.

31. The system of claim 29 further comprising:

a second network device comprising;

a third interface for receiving said plurality of packets in said commonly-used proxy protocol;

a second conversion utility for converting said plurality of packets from said commonly-used proxy protocol to said multimedia protocol; and

a fourth interface for distributing each of said plurality of packets using said multimedia protocol.

32. The system of claim 31 wherein said plurality of packets traverse said receiving proxy server by using said commonly-used proxy protocol.

33. The system of claim 32 wherein said plurality of packets are received at said third interface from said proxy server.

34. The system of claim 29 wherein said multimedia protocol comprises on of:

SIP H.323, VoIP, Skype, and IAX.

35. The system of claim 29 wherein said commonly-used proxy protocol comprises one of:

HTTP, HTTPS, FTP, POP3, SMTP, and IMAP.