Methods, systems, and computer readable media for session initiation protocol (SIP) identity verification

• US 8,601,146 B2
• Filed: 10/21/2010
• Issued: 12/03/2013
• Est. Priority Date: 10/21/2009
• Status: Active Grant

• Current Assignee: Tekelec
• Original Assignee: Tekelec
• Inventors: Pascual Avila, Victor, Kuthan, Jiri, Sisalem, Dorgham, Coeffic, Raphael
• Primary Examiner(s): Hussain, Tauqir
• Application Number:
  US12/909,128
• Publication Number:
  US 20110099282A1
• Time in Patent Office: 1,139 Days
• Field of Search: 709/229
• US Class Current: 709/229
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Methods, systems, and computer readable media for verifying the identity of a SIP user seeking to establish a session are disclosed. Methods for verifying the identity of a SIP user seeking to establish a session described herein may be performed at a computing platform that includes a SIP user agent. According to one method, an INVITE message for establishing a session is received, where the INVITE message includes sender identification information and dialog identification information. In response to receiving the INVITE message, a subscription request including the dialog identification information is sent to a second computing platform that includes a user agent identified by the sender identification information in the INVITE message. A response to the subscription request is received and, based on the response to the subscription request, it is determined whether the identity of the sender of the INVITE message can be verified.

Claims

1. A method for verifying the identity of a SIP user seeking to establish a session:

at a computing platform that includes a SIP user agent;

receiving an INVITE message for establishing a session, the INVITE message including sender identification information and dialog identification information;

in response to receiving the INVITE message, sending a subscription request including the dialog identification information to a second computing platform that includes a user agent identified by the sender identification information in the INVITE message;

receiving a response to the subscription request; and

determining, based on the response to the subscription request, whether the identity of the sender of the INVITE message can be verified,

wherein sending the subscription request message regarding the dialog ID includes sending a SUBSCRIBE message specifying an event identifying a half-dialog being subscribed to and wherein receiving a response includes receiving a response indicating awareness or non-awareness of the half-dialog.

2. The method of claim 1 comprising, in response to determining that the identity of the sender of the INVITE message cannot be verified, rejecting establishment of the session.

3. The method of claim 2 wherein rejecting the establishment of the session includes sending a suspicious call indication to the sender of the INVITE message.

4. The method of claim 1 comprising, in response to determining that the identity of the sender of the INVITE message cannot be verified, establishing the session with the sender of the INVITE message.

5. The method of claim 1 wherein determining based on the response whether the identity of the sender of the INVITE message can be verified includes determining that the identity can be verified in response to receiving a response message indicating awareness of the half-dialog.

6. A system for SIP identity verification, the system comprising:

a computing platform;

a session initiation module implemented on the computing platform for receiving an INVITE message for establishing a session, the INVITE message including a sender identification information and dialog identification information;

a dialog event package module implemented on the computing platform for supporting a SIP dialog event package; and

an identity verification module implemented on the computing platform for, in response to receiving the INVITE message, instructing the dialog event package module to send a subscription request including the dialog identification information to a second computing platform including a user agent identified by the sender identification information, for receiving a response to the subscription request, and for determining, based on the response, whether the identity of the sender of the INVITE message can be verified,

wherein the identity verification module is configured to send a SUBSCRIBE message specifying an event identifying a half-dialog being subscribed to and wherein receiving a response includes receiving a response indicating awareness or non-awareness of the half-dialog.

7. The system of claim 6 wherein the identity verification module is configured to reject establishment of the session in response to determining that the identity of the sender of the INVITE message cannot be verified.

8. The system of claim 6 wherein the identity verification module is configured to send a suspicious call indication to the sender of the INVITE message.

9. The system of claim 6 wherein the identity verification module is configured to establish the session with the sender of the INVITE message in response to determining that the identity of the sender of the INVITE message cannot be verified.

10. The system of claim 6 wherein the identity verification module is configured to determine that the identity can be verified in response to receiving a response message indicating awareness of the half-dialog.

11. A computer readable medium comprising computer executable instructions embodied in a non-transitory computer readable medium and when executed by a processor of a computer performs steps comprising:

at a computing platform that includes a SIP user agent;

receiving an INVITE message for establishing a session, the INVITE message including sender identification information and dialog identification information;

in response to receiving the INVITE message, sending a subscription request including the dialog identification information to a second computing platform that includes a user agent identified by the sender identification information in the INVITE message;

receiving a response to the subscription request; and

determining, based on the response to the subscription request, whether the identity of the sender of the INVITE message can be verified,

wherein sending the subscription request message regarding the dialog ID includes sending a SUBSCRIBE message specifying an event identifying a half-dialog being subscribed to and wherein receiving a response includes receiving a response indicating awareness or non-awareness of the half-dialog.