System and method of hiding an internet protocol (IP) address of an IP terminal during a multimedia session

• US 20020194378A1
• Filed: 04/05/2001
• Published: 12/19/2002
• Est. Priority Date: 04/05/2001
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Foti, George
• Application Number:
  US09/826,601
• Publication Number:
  US 20020194378A1
• Time in Patent Office: Days
• US Class Current: 709/246
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2539 Hiding addresses; Keeping addresses anonymous
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A system and method of hiding the source Internet Protocol (IP) address of an originating and/or terminating terminal during media flow by routing IP packets through an enhanced Media Resource Function (MRF) that removes the source address and substitutes an alias address. The MRF performs an address translation by mapping the source address to an IP address for the MRF and then forwarding the packets to the terminating terminal. The terminating terminal sees the MRF address as the source address for the packets. Packets returned in the opposite direction are addressed to the alias address at the MRF. The MRF then substitutes the originating terminal'"'"'s IP address for the destination address, and forwards the packets to the originating terminal.

Claims

1. A method of hiding an Internet Protocol (IP) address of an originating IP terminal from a terminating IP terminal during a multimedia session in an IP-based network, said method comprising the steps of:

sending media data packets from the originating IP terminal to an intermediate address translation function in the network, said data packets including an IP address of the originating IP terminal as a source address, and an IP address for the address translation function as a destination address;

receiving the media data packets from the originating IP terminal in the address translation function;

translating, by the address translation function, the source address from the IP address of the originating IP terminal to the IP address for the address translation function;

translating, by the address translation function, the destination address from the IP address for the address translation function to an IP address for the terminating IP terminal; and

sending the translated media data packets from the address translation function to the terminating IP terminal, said translated data packets including the IP address for the address translation function as a source address, and the IP address for the terminating IP terminal as a destination address.

2. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 1 wherein the step of sending media data packets from the originating IP terminal to an intermediate address translation function includes sending the data packets to a Media Resource Function (MRF) that includes address translation tables.

3. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 1 further comprising, before the step of sending media data packets from the originating IP terminal to the intermediate address translation function, the step of sending the IP address for the address translation function to the originating IP terminal and the terminating IP terminal during setup of the multimedia session.

4. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 1 further comprising the steps of:

sending return media data packets from the terminating IP terminal to the address translation function, said return data packets including the IP address for the terminating IP terminal as a source address, and the IP address for the address translation function as a destination address;

receiving the return media data packets from the terminating IP terminal in the address translation function;

translating, by the address translation function, the destination address from the IP address for the address translation function to the IP address for the originating IP terminal; and

sending translated returned media data packets from the address translation function to the originating IP terminal, said translated returned data packets including the IP address for the terminating IP terminal as a source address, and the IP address for the originating IP terminal as a destination address.

5. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 4 further comprising the steps of:

sending the IP address for the address translation function to the originating IP terminal during setup of the multimedia session, the originating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for the media data packets; and

sending the IP address for the address translation function to the terminating IP terminal during setup of the multimedia session, the terminating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for the return media data packets.

6. A method of setting up a multimedia session in an Internet Protocol (IP)-based network in which an IP address of an originating IP terminal is hidden from a terminating IP terminal, said method comprising the steps of:

setting up an address translation function in the network that includes an address translation table;

receiving an Invite message in the address translation function that identifies an IP media address of the originating IP terminal;

receiving a response message in the address translation function that identifies an IP media address of the terminating IP terminal;

storing in the address translation table, instructions to translate the source address in media data packets having the IP media address of the originating IP terminal as a source address to the IP address of the address translation function, and to translate the destination address to the IP media address of the terminating IP terminal;

sending the IP address for the address translation function to the originating IP terminal, the originating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for the media data packets; and

sending the IP address for the address translation function to the terminating IP terminal, the terminating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for return media data packets.

7. The method of setting up a multimedia session in an IP-based network of claim 6 further comprising storing in the address translation table, instructions to translate the destination address in media data packets having the IP media address of the terminating IP terminal as a source address to the IP media address of the originating IP terminal while leaving the source address unchanged.

8. The method of setting up a multimedia session in an IP-based network of claim 7 further comprising deleting the translation instructions from the address translation table when the multimedia session is cleared.

9. The method of setting up a multimedia session in an IP-based network of claim 6 further comprising the steps of:

sending an Invite message from the originating IP terminal to the originating IP terminal'"'"'s home network;

determining in the originating IP terminal'"'"'s home network, whether the originating IP terminal subscribes to a hidden identity feature; and

routing the origination message to the address translation function, upon determining that the originating IP terminal subscribes to the hidden identity feature.

10. A method of hiding an Internet Protocol (IP) address of an originating IP terminal from a terminating IP terminal during a multimedia session in an IP-based network, said method comprising the steps of:

receiving, by an address translation function in the network, media data packets from the originating IP terminal, said media data packets including the IP address of the originating IP terminal as a source address, and an IP address of the address translation function as a destination address;

translating, by the address translation function, the source address from the IP address of the originating IP terminal to the IP address for the address translation function; and

sending, by the address translation function, translated media data packets to the terminating IP terminal, said translated media data packets including the IP address of the address translation function as the source address.

11. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 10 wherein the address translation function is a Media Resource Function (MRF), and the method further comprises setting up address translation tables in the MRF.

12. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 10 further comprising, before the step of receiving media data packets in the address translation function from the originating IP terminal, the step of sending the IP address for the address translation function to the originating IP terminal and the terminating IP terminal during setup of the multimedia session.

13. The method of hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 10 further comprising the steps of:

receiving, by the address translation function, return media data packets from the terminating IP terminal, said return media data packets including the IP address for the address translation function as the destination address;

translating, by the address translation function, the IP address for the address translation function to the IP address for the originating IP terminal; and

sending, by the address translation function, translated return media data packets to the originating IP terminal, said translated return media data packets including the IP address for the terminating IP terminal as the source address, and the IP address of the originating IP terminal as the destination address.

15. The system for hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 14 wherein the address translation function is a Media Resource Function (MRF).

16. The system for hiding an IP address of an originating IP terminal from a terminating IP terminal of claim 14 further comprising a signaling mechanism in the address translation function that sends the IP address for the address translation function to the originating IP terminal and the terminating IP terminal during setup of the multimedia session.

18. The system for setting up a multimedia session of claim 17 further comprising:

a transmitter in the originating IP terminal for sending an origination message from the originating IP terminal to the originating IP terminal'"'"'s home network; and

a Serving Call State Control Function (S-CSCF) in the originating IP terminal'"'"'s home network that determines whether the originating IP terminal subscribes to a hidden identity feature, and that routes the origination message to the address translation function, upon determining that the originating IP terminal subscribes to the hidden identity feature.

20. The address translation function of claim 19 wherein the router also receives return media data packets from the terminating IP terminal, said return media data packets including the IP address of the terminating IP terminal as a source address, and the IP address of the address translation function as a destination address, said router also sending translated return media data packets to the originating IP terminal, said translated return media data packets including the IP address of the terminating IP terminal as the source address, and the IP address of the originating IP terminal as a destination address.

21. The address translation function of claim 19 wherein the address translation table leaves the source address in the return media data packets unchanged, and translates the destination address in the return media data packets from the IP address of the address translation function to the IP address of the originating IP terminal.

14. A system for hiding an Internet Protocol (IP) address of an originating IP terminal from a terminating IP terminal during a multimedia session in an IP-based network, said system comprising:

a transmitter in the originating IP terminal that transmits media data packets from the originating IP terminal to an intermediate address translation function in the originating IP terminal'"'"'s home network, said data packets including the IP address of the originating IP terminal as a source address, and an IP address for the address translation function as a destination address;

an address translation table in the address translation function, that translates the source address from the IP address of the originating IP terminal to the IP address for the address translation function, and that translates the destination address from the IP address for the address translation function to an IP address for the terminating IP terminal; and

a router in the address translation function that receives the media data packets from the originating IP terminal, and sends translated media data packets to the terminating IP terminal, said translated data packets including the IP address for the address translation function as the source address, and the IP address for the terminating IP terminal as the destination address.

17. A system for setting up a multimedia session in an Internet Protocol (IP)-based network in which an IP address of an originating IP terminal is hidden from a terminating IP terminal, said system comprising:

an address translation table in an address translation function in the originating IP terminal'"'"'s home network, said table being indexed to recognize the IP address of the originating IP terminal as a source address, and in response, said table translating the source address from the IP address of the originating IP terminal to an IP address of the address translation function; and

a signaling mechanism in the address translation function for;

obtaining an IP address of the terminating IP terminal;

sending the IP address for the address translation function to the originating IP terminal, the originating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for the media data packets; and

sending the IP address for the address translation function to the terminating IP terminal, the terminating IP terminal being instructed to utilize the IP address for the address translation function as the destination address for return media data packets.

19. An address translation function in an Internet Protocol (IP)-based network for hiding an address of an originating IP terminal from a terminating IP terminal during a multimedia session, said address translation function comprising:

a signaling mechanism that sends an IP address of the address translation function to the originating IP terminal and the terminating IP terminal during setup of the multimedia session;

a router that receives media data packets from the originating IP terminal, said media data packets including the IP address of the originating IP terminal as a source address, and the IP address of the address translation function as a destination address, said router also sending translated media data packets to the terminating IP terminal, said translated media data packets including the IP address of the address translation function as the source address; and

an address translation table that translates the source address in the media data packets from the IP address of the originating IP terminal to the IP address for the address translation function, and translates the destination address from the IP address of the address translation function to the IP address of the terminating IP terminal.

22. A method of hiding an Internet Protocol (IP) address of a terminating IP terminal from an originating IP terminal during a multimedia session in an IP-based network, said method comprising the steps of:

receiving, by an address translation function in the home network of the terminating IP terminal, media data packets from the originating IP terminal, said media data packets including the IP address of the originating IP terminal as a source address, and an IP address of the address translation function as a destination address;

translating, by the address translation function, the destination address from the IP address of the address translation function to the IP address of the terminating IP terminal;

sending, by the address translation function, translated media data packets to the terminating IP terminal;

receiving, by the address translation function, return media data packets from the terminating IP terminal, said return media data packets including the IP address of the terminating IP terminal as a source address, and the IP address of the address translation function as a destination address;

translating, by the address translation function, the destination address in the return media data packets from the IP address of the address translation function to the IP address of the originating IP terminal;

translating, by the address translation function, the source address in the return media data packets from the IP address of the terminating IP terminal to the IP address of the address translation function; and

sending, by the address translation function, translated return media data packets to the originating IP terminal, said translated media data packets including the IP address of the address translation function as the source address.

23. A method of hiding an Internet Protocol (IP) address of an originating IP terminal from a terminating IP terminal, and hiding an IP address of the terminating IP terminal from the originating IP terminal during a multimedia session in an IP-based network, said method comprising the steps of:

receiving, by a first address translation function in a home network of the originating IP terminal, media data packets from the originating IP terminal, said media data packets including the IP address of the originating IP terminal as a source address, and an IP address of the first address translation function as a destination address;

translating, by the first address translation function, the source address from the IP address of the originating IP terminal to the IP address of the first address translation function;

translating, by the first address translation function, the destination address from the IP address of the first address translation function to the IP address of a second address translation function in a home network of the terminating IP terminal;

sending, by the first address translation function, translated media data packets to the second address translation function, said translated media data packets including the IP address of the first address translation function as the source address;

translating, by the second address translation function, the source address from the IP address of the first address translation function to the IP address of the second address translation function;

translating, by the second address translation function, the destination address from the IP address of the second address translation function to the IP address of the terminating IP terminal;

sending, by the second address translation function, twice translated media data packets to the terminating IP terminal, said twice translated media data packets including the IP address of the second address translation function as the source address;

receiving, by the second address translation function, return media data packets from the terminating IP terminal, said return media data packets including the IP address of the terminating IP terminal as a source address, and the IP address of the second address translation function as a destination address;

translating, by the second address translation function, the source address in the return media data packets from the IP address of the terminating IP terminal to the IP address of the second address translation function;

translating, by the second address translation function, the destination address in the return media data packets from the IP address of the second address translation function to the IP address of the first address translation function;

sending, by the second address translation function, translated return media data packets to the first address translation function, said translated return media data packets including the IP address of the second address translation function as the source address;

translating, by the first address translation function, the source address in the translated return media data packets from the IP address of the second address translation function to the IP address of the first address translation function;

translating, by the first address translation function, the destination address in the translated return media data packets from the IP address of the first address translation function to the IP address of the originating IP terminal; and

sending, by the first address translation function, twice translated return media data packets to the originating IP terminal, said twice translated media data packets including the IP address of the first address translation function as the source address.