METHODS, SYSTEMS, AND COMPUTER READABLE MEDIA FOR MEDIA SESSION POLICY COMPLIANCE AUDITING AND ENFORCEMENT USING A MEDIA RELAY AND SESSION INITIATION PROTOCOL (SIP) SIGNALING

• US 20100154047A1
• Filed: 12/14/2009
• Published: 06/17/2010
• Est. Priority Date: 12/12/2008
• Status: Active Grant

• Current Assignee: Tekelec
• Original Assignee: Tekelec
• Inventors: Sparks, Robert J., Campbell, Ben A., Deo, Ajay P., Roach, Adam B.
• Granted Patent: US 8,893,248 B2
• Time in Patent Office: Days
• US Class Current: 726/9
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 65/10 Architectures or entities
• CPC Class Codes: H04L 65/1045 Proxies, e.g. for session initiation protocol [SIP]
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/1104 Session initiation protocol [SIP]

Abstract

Methods, systems, and computer readable media for media session policy compliance auditing and enforcement using a media relay and session initiation protocol (SIP) signaling are provided. One method includes at a SIP policy server, receiving SIP signaling from a user agent client to obtain a policy for media session and, in response, generating at least one media session correlation token. At least a portion of the SIP policy server is implemented in hardware. The media session correlation token and the media policy are communicated to the user agent client and to a media relay. Identification information for the media relay is also communicated to the user agent client. At least a portion of the media relay is implemented in hardware. At the media relay, the media session correlation token is received and used to correlate and store usage information for the media session and to monitor compliance with the media policy.

Claims

1. A method for providing for media session policy compliance auditing and enforcement between a media relay and session initiation protocol (SIP) signaling, the method comprising:

at a SIP policy including one or more processors, receiving SIP signaling from a user agent client (UAC) to determine a media policy for media session, and, in response;

generating at least one media session correlation token;

communicating the at least one media session correlation token and the media policy to the UAC and to a media relay separate from the SIP policy server, at least a portion of the media relay being implemented in hardware; and

communicating identification information for the media relay to the user agent client; and

at the media relay, receiving the at least one media session correlation token and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the media policy.

2. The method of claim 1 comprising, at the media relay, using the media session correlation token and the media policy to provide for real-time enforcement of the media policy.

3. The method of claim 2 wherein providing for real-time enforcement of the media policy includes freeing resources associated with the media session and blocking packets associated with the media session after termination signaling associated with the media session has been exchanged.

4. The method of claim 2 wherein providing for real-time enforcement of the media policy includes establishing a lawful intercept tap point at the media relay.

5. The method of claim 1 comprising using the at least one media session correlation token to extract the usage information from the media relay and audit the media session.

6. The method of claim 5 wherein auditing the media session includes determining whether media session parameters conform to the media policy.

7. The method of claim 5 comprising generating charging information based on the auditing.

8. The method of claim 1 wherein the media relay comprises a TURN server.

9. The method of claim 1 wherein the at least one media session correlation token comprises a first media session correlation token that is communicated to the UAC and a second media session correlation token that is communicated to the media relay.

10. The method of claim 1 wherein the at least one media session correlation token comprises a single media session correlation token that is communicated to the UAC and to the media relay.

11. The method of claim 10 wherein the single media session correlation token comprises the user ID used by the UAC to authenticate itself to the media relay.

12. The method of claim 1 comprising communicating the media session correlation token to a called user agent client to correlate signaling from the called user agent client with the media session.

13. A system for providing for media session policy compliance auditing and enforcement between a media relay and session initiation protocol (SIP) signaling, the system comprising:

a SIP proxy/policy server including one or more processors for receiving SIP signaling from a user agent client (UAC) to determine a media policy for media session, and, in response;

for generating at least one media session correlation token;

for communicating the at least one media session correlation token and the media policy to the UAC and to a media relay separate from the SIP policy server, at least a portion of the media relay being implemented in hardware; and

for communicating identification information for the media relay to the user agent client; and

the media relay for receiving the at least one media session correlation token and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the policy.

14. The system of claim 13 wherein the media relay uses the media session correlation token and the media policy to provide for real-time enforcement of the media policy.

15. The system of claim 14 wherein providing for real-time enforcement of the media policy includes freeing resources associated with the media session and blocking packets associated with the media session after termination signaling associated with the media session has been exchanged.

16. The system of claim 14 wherein providing for real-time enforcement of the media policy includes establishing a lawful intercept tap point at the media relay.

17. The system of claim 13 wherein the media relay is configured to use the at least one media session correlation token to extract the usage information from the media relay and audit the media session.

18. The system of claim 17 wherein auditing the media session includes determining whether media session parameters conform to the media policy.

19. The system of claim 17 comprising generating charging information based on the auditing.

20. The system of claim 13 wherein the media relay comprises a TURN server.

21. The system of claim 13 wherein the at least one media session correlation token comprises a first media session correlation token that is communicated to the UAC and a second media session correlation token that is communicated to the media relay.

22. The system of claim 13 wherein the at least one media session correlation token comprises a single media session correlation token that is communicated to the UAC and to the media relay.

23. The system of claim 22 wherein the single media session correlation token comprises the user ID used by the UAC to authenticate itself to the media relay.

24. The system of claim 13 wherein the SIP proxy/policy server is configured to communicate the media session correlation token to a called user agent client to correlate signaling from the called user agent client with the media session.

25. A non-transitory computer readable medium having stored thereon computer executable instructions that when executed by the processor of a computer controls the computer to perform steps comprising:

at a SIP policy server, receiving SIP signaling from a user agent client (UAC) to determine a media policy for media session, and, in response;

generating at least one media session correlation token;

communicating the at least one media session correlation token and the media policy to the UAC and to a media relay separate from the SIP policy server; and

communicating identification information for the media relay to the user agent client; and

at the media relay, receiving the at least one media session correlation token and using the at least one token to correlate and store usage information for the media session and to monitor compliance with the policy.