Method and apparatus for connecting packet telephony calls between secure and non-secure networks

• US 8,582,749 B2
• Filed: 12/21/2009
• Issued: 11/12/2013
• Est. Priority Date: 03/08/2002
• Status: Expired due to Fees

• Current Assignee: Tahoe Research Limited (f/k/a Learndale Limited) (Vector Capital Corporation)
• Original Assignee: Intel Corporation
• Inventors: Strathmeyer, Carl R., Mercer, Hugh P., Finnie, Donald K., Illikkal, Rameshkumar G., Phomsopha, Bounthavivone K.
• Primary Examiner(s): DEANE JR, WILLIAM J
• Application Number:
  US12/643,732
• Publication Number:
  US 20100098060A1
• Time in Patent Office: 1,422 Days
• Field of Search: 379/219, 379/88.17, 370/352
• US Class Current: 379/219
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/25 of the same type
• CPC Class Codes: H04L 61/50 Address allocation
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 65/1083 In-session procedures
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1106 Call signalling protocols; H.323 and related
• CPC Class Codes: H04L 65/65 Network streaming protocols, e.g. real-time transport protocol [RTP] or real-time control protocol [RTCP]
• CPC Class Codes: H04L 69/08 Protocols for interworking; Protocol conversion
• CPC Class Codes: H04L 69/085 specially adapted for interworking of IP-based networks with other networks
• CPC Class Codes: H04M 7/0078 Security; Fraud detection; Fraud prevention

Abstract

Described herein is a method and apparatus for connecting packet telephony calls between secure networks and non-secure networks. A first telephony stream having information content for delivery to a first address may be received wherein the first telephony stream is formatted according to a first communication protocol used by a first network. The first telephony stream may be terminated at a secure boundary between the first network and a second network. A second address associated with the first address may be identified. A second telephony stream having the information content and formatted according to the second communication protocol may be delivered to the second address.

Claims

1. A method, comprising:

receiving a first telephony stream having information content for delivery to a first address, the first telephony stream formatted according to a first communication protocol used by a first network, the first network comprising an untrusted network, the information content of the first telephony stream comprising a telephony information payload;

in response to sensing, at a secure boundary between the first network and a second network, the first communication protocol used by the first network, terminating the first telephony stream at the secure boundary, the second network comprising a trusted network;

in response to receiving the first telephony stream, dynamically selecting a second communication protocol, different than the first communication protocol, in use by the second network, and identifying a second address associated with the first address, the second address included in the second network;

replicating the information content of the first telephony stream to generate a replica of the telephony information payload of first telephony stream; and

establishing for the second network a second telephony stream to include the replica of the telephony information payload of the first telephony stream formatted according to the second communication protocol and to be delivered to the second address.

2. The method of claim 1, further comprising:

sensing the first communication protocol used by the first network and dynamically selecting a reception protocol for receiving the first telephony stream;

sensing the second communication protocol used by the second network and dynamically selecting a transmission protocol for sending the second telephony stream; and

transferring the replica of the telephony information payload of the first telephony stream to the second telephony stream while insulating the first network from the second network.

3. The method of claim 1, wherein the secure boundary insulates the first telephony stream, the first client, and the first network from the second telephony stream, the second client, and the second network.

4. The method of claim 3, wherein at least one of the first or second telephony streams are IP telephony communications, the insulating includes isolating a first physical network interface, a first packet network protocol stack, and/or a first packet telephony protocol stack of the first network from a second physical network interface, a second packet network protocol stack, and/or a second packet telephony protocol stack of the second network.

5. The method of claim 4, further comprising:

transferring the replica of the telephony information payload of the first telephony communication to the second telephony communication using a controller connected to the first packet telephony protocol stack and the second packet telephony protocol stack, wherein the controller maintains the insulation between the first packet telephony protocol stack and the second packet telephony protocol stack.

6. An article of manufacture comprising a machine-readable non-transitory storage medium containing content that, when executed, causes a machine to:

receive a first telephony stream having information content for delivery to a first address, the first telephony stream formatted according to a first communication protocol used by a first network, the first network comprising an untrusted network, the information content of the first telephony stream comprising a telephony information payload;

in response to sensing, at a secure boundary between the first network and a second network, the first communication protocol used by the first network, terminate the first telephony stream at the secure boundary, the second network comprising a trusted network;

in response to receiving the first telephony stream, dynamically select a second communication protocol, different than the first communication protocol, in use by the second network, and identify a second address associated with the first address, the second address included in the second network;

replicate the information content of the first telephony stream to generate a replica of the telephony information payload of first telephony stream; and

establish for the second network a second telephony stream to include the replica of the telephony information payload of the first telephony stream formatted according to the second communication protocol and to be delivered to the second address.

7. The article of manufacture of claim 6 further comprising content that, when executed, causes a machine to:

sense the first communication protocol used by the first network and dynamically select a reception protocol for receiving the first telephony stream;

sense the second communication protocol used by the second network and dynamically select a transmission protocol for sending the second telephony stream; and

transfer the replica of the telephony information payload of the first telephony stream to the second telephony stream while insulating the first network from the second network.

8. The article of manufacture of claim 6, wherein the secure boundary insulates the first telephony stream, the first client, and the first network from the second telephony stream, the second client, and the second network.

9. The article of manufacture of claim 8, wherein at least one of the first or second telephony streams are IP telephony communications, the insulating includes isolating a first physical network interface, a first packet network protocol stack, and/or a first packet telephony protocol stack of the first network from a second physical network interface, a second packet network protocol stack, and/or a second packet telephony protocol stack of the second network.

10. The article of manufacture of claim 9 further comprising content that, when executed, causes a machine to:

transfer the replica of the telephony information payload of the first telephony communication to the second telephony communication using a controller connected to the first packet telephony protocol stack and the second packet telephony protocol stack, wherein the controller maintains the insulation between the first packet telephony protocol stack and the second packet telephony protocol stack.

11. An apparatus comprising:

a first network interface, comprising an untrusted network, to receive a first telephony stream having information content for delivery to a first address, the first telephony stream formatted according to a first communication protocol used by a first network, the information content of the first telephony stream comprising a telephony information payload;

a second network interface associated with a second network comprising a trusted network;

a packet telephony transformer coupled to the first network interface and the second network interface, the packet telephony transformer to

in response to sensing, at a secure boundary between the first network and a second network, the first communication protocol used by the first network, terminate the first telephony stream at the secure boundary,

identify a second address associated with the first address, the second address included in the second network,

replicate the information content of the first telephony stream to generate a replica of the telephony information payload of first telephony stream, and

establish for the second network a second telephony stream to receive a replica of the information content, the second telephony stream formatted according to a second communication protocol in use by the second network and to be delivered to the second address; and

a dynamic protocol selector to, in response to the first network interface receiving the first telephony stream, dynamically select the second communication protocol, different than the first communication protocol, in use by the second network.

12. The apparatus of claim 11, the packet telephony transformer to further

sense the first communication protocol used by the first network and dynamically select a reception protocol for receiving the first telephony stream,

sense the second communication protocol used by the second network and dynamically select a transmission protocol for sending the second telephony stream, and

transfer the replica of the telephony information payload of the first telephony stream to the second telephony stream while insulating the first network from the second network.

13. The apparatus of claim 11, the secure boundary to insulate the first telephony stream, the first client, and the first network from the second telephony stream, the second client, and the second network.

14. The apparatus of claim 13, wherein at least one of the first or second telephony streams are IP telephony communications, the insulating includes isolating a first physical network interface, a first packet network protocol stack, and/or a first packet telephony protocol stack of the first network from a second physical network interface, a second packet network protocol stack, and/or a second packet telephony protocol stack of the second network.

15. The apparatus of claim 14, the packet telephony transformer to further transfer the replica of the telephony information payload of the first telephony communication to the second telephony communication using a controller connected to the first packet telephony protocol stack and the second packet telephony protocol stack, wherein the controller maintains the insulation between the first packet telephony protocol stack and the second packet telephony protocol stack.

16. The apparatus of claim 11, wherein at least one of the first network interface or the second network interface comprises an asynchronous transfer mode (ATM) interface.