Method and apparatus for voice over internet protocol telephony using a virtual private network

• US 7,743,411 B2
• Filed: 04/14/2005
• Issued: 06/22/2010
• Est. Priority Date: 04/14/2005
• Status: Expired due to Fees

• Current Assignee: Sbc Knowledge Ventures, L.P.
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Ying, Goangshiuan Shawn, Edmon, Eugene L., Aspell, Steve M., Chen, Holly Chan
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): PERUNGAVOOR, VENKATANARAY
• Application Number:
  US11/106,362
• Publication Number:
  US 20060236388A1
• Time in Patent Office: 1,895 Days
• Field of Search: 380/41, 380256-257, 726/9, 726/12, 726 14- 15, 726/29, 379/242, 379/265.13, 379/273, 379/283, 379/308, 379/321, 455/403, 455/419, 455/421, 455/445
• US Class Current: 726/15
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 65/1056 Multi-site

Abstract

A system and method are disclosed for extending communications over the Internet by associating a telephone number with, for example a remote virtual private network (VPN) client IP address. A call can be received to the telephone number and an invite signal is provided to the remote VPN client utilizing the IP address. When the VPN client is able, a VPN can be established and the call can be routed to a phone associated with the remote VPN client IP address.

Claims

1. A method of processing a call using a central virtual private network (VPN) server, the method comprising:

associating a telephone number with a remote VPN client;

linking the telephone number to an Internet protocol (IP) address associated with the remote VPN client;

receiving, at the central VPN server, a call addressed to the telephone number associated with the remote VPN client, wherein the central VPN server is associated with a local area network (LAN);

determining based on a look-up table whether the IP address is external to the LAN;

determining whether a connection between the central VPN server and the remote VPN client is a secure connection;

sending, using the IP address, an invitation to the remote VPN client when the connection is not secure, the invitation requesting the remote VPN client to establish a secure connection with the central VPN server, wherein the invitation is sent in response to receiving the call at the central VPN server and determining that the IP address is external to the LAN;

initiating a secure connection via a virtual private network connection to the remote VPN client when the remote VPN client accepts the invitation; and

routing the call to the VPN client via the virtual private network connection.

2. The method of claim 1, wherein the call is one of a voice based communication, a facsimile based communication, an e-mail based communication, and a message based communication.

3. The method of claim 1, further comprising:

initializing the VPN client by at least partially connecting with the central VPN server;

authorizing the VPN client as a remote client of the central VPN server;

authorizing a remote phone as a telephone extension of the central VPN server; and

providing the VPN client with an IP address associated with the central VPN server.

4. The method of claim 1, further comprising;

disconnecting the secure connection responsive to a signal;

sending a second invitation from the central VPN server to the remote client to re-establish the secure connection responsive to a second call; and

re-establishing a secure connection between the central VPN server and the remote VPN client responsive to the VPN client accepting the second invitation.

5. The method of claim 1, wherein establishing the virtual private network connection between the remote VPN client and the central VPN server further comprises authorizing the remote VPN client at the central VPN server utilizing security information.

6. The method of claim 1, wherein the remote VPN client is moved to a different location and the invitation is sent to the different location.

7. The method of claim 1, further comprising selecting a do not disturb option wherein the remote VPN client can accept or reject invitations from the central VPN server to establish a VPN connection.

8. The method of claim 1, wherein the remote VPN client is co-located with a residential gateway.

9. A system for Internet based communications comprising:

an Internet enabled call-processing platform having an associated input configured to receive an incoming call signal, the incoming call signal having a destination address useable to route an incoming call to a remote virtual private network (VPN) client;

a memory communicatively coupled to the processing platform and configured to store a local network address and a remote network address for the remote VPN client;

a virtual private network (VPN) server responsive to the call-processing platform, wherein the VPN server is associated with a local area network (LAN) and wherein the VPN server is configured to;

determine based on a look-up table whether the remote network address is external to the LAN;

send an invitation to establish a secure connection to the remote network address when the incoming call signal is to be routed to the remote network address after determining that the connection between the VPN server and the VPN client is not secure and that the remote network address is external to the LAN, wherein the invitation is sent in response to receiving the incoming call signal at the call-processing platform; and

initiate the secure connection to the VPN client.

10. The system of claim 9, wherein the destination address is one of a telephone number and an IP address.

11. The system of claim 9, wherein the call-processing platform supports a direct inward dial configuration.

12. The system of claim 9, wherein the destination address is assigned by a private telephone switching network responsive to processing the incoming call signal.

13. The system of claim 9, further comprising a voice enabled router configured to convert the destination address of the incoming call signal to an IP address and to route the incoming call signal to the remotely located telephone extension over the Internet.

14. The system of claim 9, wherein the client provides a do not disturb signal responsive to the invitation to establish a virtual private network.

15. The system of claim 9 wherein the VPN server sends the invitation to a client VPN engine at the remotely located telephone extension and the client initiates a creation of a virtual private network with the VPN server.

16. A method for providing remote extensions for a telephone exchange comprising:

receiving an Internet protocol (IP) address for a remote Internet enabled phone at a central Internet enabled telephone switch, wherein the central Internet enabled telephone switch is associated with a local area network (LAN);

determining based on a lookup table whether the IP address is external to the LAN;

determining whether a connection between the remote Internet enabled phone and the central Internet enabled telephone switch is secure;

utilizing the IP address to send an invitation to the remote Internet enabled telephone to create a virtual private network with the central Internet enabled telephone switch responsive to a signal received by the central Internet enabled telephone switch when the connection is not secure and the IP address is external to the LAN, wherein the signal is a call addressed to the remote Internet enabled phone; and

establishing a secure connection between the remote Internet enabled telephone and the central Internet enabled telephone switch after the remote Internet enabled telephone accepts the invitation.

17. The method of claim 16, further comprising receiving authorization parameters at the central Internet enabled telephone switch.

18. The method of claim 16, further comprising storing the IP address of the remote Internet enabled telephone in a memory local to the central Internet enabled telephone switch.

19. The method of claim 18, further comprising receiving a request to communicate with a user associated with the remote Internet enabled telephone and retrieving the IP address from the memory.

20. The method of claim 16, further comprising prepopulating the remote Internet enabled telephone with an IP address of the central Internet enabled telephone switch.

21. The method of claim 16, further comprising associating a multi-digit telephone number with the IP address.

22. A computer readable medium tangibly embodying a program of instructions to manipulate a processor to:

associate a multi-digit telephone number with a remote virtual private network (VPN) client utilizing an Internet protocol (IP) address;

receive a call at a VPN server addressed to the multi-digit telephone number, wherein the VPN server is associated with a local area network (LAN);

determine based on a look-un table whether the IP address is external to the LAN;

send an invitation to the remote VPN client to establish a secure connection to the VPN server after the VPN server determines that the connection is not secure and the IP address is external to the LAN, wherein the invitation is sent in response to receiving the call at the VPN server;

establish a secure connection via a VPN connection after the remote VPN client accepts the invitation; and

route the call to the remote VPN client via the VPN connection.

23. The computer readable medium of claim 22, wherein the instructions further manipulate the processor to send voice communications via the VPN connection.

24. The computer readable medium of claim 22, wherein the instructions further manipulate the processor to send the invitation responsive to one of a voice message, an e-mail, a facsimile transmission, a pager, and a scheduling client.