System and method for determining trust for SIP messages

• US 8,694,660 B2
• Filed: 07/09/2012
• Issued: 04/08/2014
• Est. Priority Date: 04/13/2009
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Bakker, Jan Hendrik Lucas, Buckley, Adrian, Allen, Andrew
• Primary Examiner(s): Luu, Le H
• Application Number:
  US13/544,760
• Publication Number:
  US 20120331158A1
• Time in Patent Office: 638 Days
• Field of Search: 709/229, 709/227, 709/228, 709/230, 455/410, 455/411, 455/404.1, 726/7, 726/1, 726/9, 370/352, 370/351
• US Class Current: 709/229
• CPC Class Codes: G06F 11/2007 using redundant communication media
• CPC Class Codes: G06F 3/1203 Improving or facilitating administration, e.g. print management
• CPC Class Codes: H04L 2101/385 Uniform resource identifier for session initiation protocol [SIP URI]
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 65/1016 IP multimedia subsystem [IMS]
• CPC Class Codes: H04L 65/1073 Registration or de-registration
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 65/611 for multicast or broadcast systems for broadcast or conference H04L12/18; arrangements for broadcast or distribution combined with broadcast H04H20/00; arrangements for broadcast applications with a direct linkage to broadcast information or to broadcast space-time H04H60/00; selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS], H04W4/06
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04W 12/10 Integrity

Abstract

A method in a user agent (UA) is provided. The method includes sending a SIP REGISTER request, and receiving a SIP REGISTER response message. The SIP REGISTER response message has a first header field that includes an identifier associated with a trusted network node. The method also includes receiving a SIP message having a second header field for indicating a URI, and sending a SIP communication if the URI matches the identifier associated with the trusted network node.

Claims

1. A method in a user agent (UA), the method comprising:

sending, by the UA, a Session Initiation Protocol (SIP) REGISTER request;

receiving, at the UA, a SIP 200 OK response message to the SIP REGISTER request, the SIP 200 OK response message having a first header field that includes an identifier associated with a trusted network node;

receiving, at the UA, a SIP message having a second header field for indicating a Uniform Resource Identifier (URI); and

sending, by the UA, a SIP communication if the URI matches the identifier associated with the trusted network node.

2. The method as claimed in claim 1, wherein the second header field comprises a P-Asserted-Identify header field.

3. The method as claimed in claim 1, wherein the trusted network node comprises one or more user agents.

4. The method as claimed in claim 1, wherein the identifier associated with the trusted network node is an address of the trusted network node.

5. A user agent (UA), comprising:

one or more processors configured to;

send, by the UA, a Session Initiation Protocol (SIP) REGISTER request;

receive, at the UA, a SIP 200 OK response message to the SIP REGISTER request, the SIP 200 OK response message having a first header field that includes an identifier associated with a trusted network node;

receive, at the UA, a SIP message having a second header field for indicating a Uniform Resource Identifier (URI); and

send, by the UA, a SIP communication if the URI matches the identifier associated with the trusted network node.

6. The UA as claimed in claim 5, wherein the second header field comprises a P-Asserted-Identify header field.

7. The UA as claimed in claim 5, wherein the trusted network node comprises one or more user agents.

8. The UA as claimed in claim 5, wherein the identifier associated with the trusted network node is an address of the trusted network node.

9. A computer program product comprising a non-transitory tangible computer readable storage medium having instructions stored thereon that, when executed by a processing device, implement a method in a user agent (UA), the method comprising:

sending, by the UA, a Session Initiation Protocol (SIP) REGISTER request;

receiving, at the UA, a SIP 200 OK response message to the SIP REGISTER request, the SIP 200 OK response message having a first header field that includes an identifier associated with a trusted network node;

receiving, at the UA, a SIP message having a second header field for indicating a Uniform Resource Identifier (URI); and

sending, by the UA, a SIP communication if the URI matches the identifier associated with the trusted network node.

10. The computer program product as claimed in claim 9, wherein the second header field comprises a P-Asserted-Identify header field.

11. The computer program product as claimed in claim 9, wherein the trusted network node comprises one or more user agents.

12. The computer program product as claimed in claim 9, wherein the identifier associated with the trusted network node is an address of the trusted network node.