METHOD AND SYSTEM FOR ESTABLISHING MEDIA CHANNEL BASED ON RELAY

• US 20130138822A1
• Filed: 07/25/2011
• Published: 05/30/2013
• Est. Priority Date: 08/09/2010
• Status: Active Grant

• Current Assignee: ZTE Corporation
• Original Assignee: ZTE Corporation
• Inventors: Wang, Wei, Chen, Zhifeng, Hu, Yongsheng
• Granted Patent: US 9,131,026 B2
• Time in Patent Office: Days
• US Class Current: 709/227
• CPC Class Codes: H04L 61/2589 over a relay server, e.g. traversal using relay for network address translation [TURN]
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 65/103 in the network
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 65/60 Network streaming of media packets
• CPC Class Codes: H04L 65/765 intermediate
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding
• CPC Class Codes: H04L 69/24 Negotiation of communication capabilities

Abstract

The disclosure discloses a method and a system for establishing a media channel based on relay. The method comprises: during a session negotiation process between a first User Equipment (UE) and a second UE, a media relay control server allocating a first service identifier and a second service identifier, transmitting the first service identifier to the first UE, transmitting the second service identifier to the second UE, and transmitting the first service identifier and the second service identifier to a media relay device; the media relay device receiving the service identifiers reported by the first UE and the second UE; the media relay device verifying, according to the first service identifier and the second identifier transmitted by the media relay control server, the service identifiers reported by the first UE and the second UE, and establishing a media channel between the first UE and the second UE if the verification is passed. Through this disclosure, the security of connections between network nodes is improved.

Claims

1. A method for establishing a media channel based on relay, comprising:

during a session negotiation process between a first User Equipment (UE) and a second UE, a media relay control server allocating a first service identifier and a second service identifier, transmitting the first service identifier to the first UE, transmitting the second service identifier to the second UE, and transmitting the first service identifier and the second service identifier to a media relay device;

the media relay device receiving the service identifiers reported by the first UE and the second UE; and

the media relay device verifying, according to the first service identifier and the second identifier transmitted by the media relay control server, the service identifiers reported by the first UE and the second UE, and establishing a media channel between the first UE and the second UE if the verification is passed.

2. The method according to claim 1, wherein the media relay device receiving the service identifiers reported by the first UE and the second UE comprises:

the media relay device receiving a first media data packet transmitted from the first UE to the second UE and acquiring the service identifier reported by the first UE from the message; and

the media relay device receiving a first media data packet transmitted from the second UE to the first UE and acquiring the service identifier reported by the second UE from the message.

3. The method according to claim 1, wherein the media relay device receiving the service identifiers reported by the first UE and the second UE comprises:

after the session negotiation is ended, the first UE first transmitting a first binding request to the media relay device before transmitting the first media data packet to the media relay device;

the media relay device receiving the first binding request and acquiring the service identifier reported by the first UE from the first binding request;

after the session negotiation is ended, the second UE first transmitting a second binding request to the media relay device before transmitting the first media data packet to the media relay device; and

the media relay device receiving the second binding request and acquiring the service identifier reported by the second UE from the second binding request.

4. The method according to claim 1, wherein the first service identifier and the second service identifier are character strings or sequence number, or, the first service identifier and the second service identifier are user name-password pairs.

5. The method according to claim 1, wherein the first service identifier and the second service identifier indicate a range of a start sequence number of a packet;

the media relay device receiving the service identifiers reported by the first UE and the second UE respectively comprises;

the media relay device receiving the first packets from the first UE and the second UE respectively after the session negotiation is ended and acquiring the sequence number of the packets; and

the media relay device verifying the service identifiers reported by the first UE and the second UE comprises;

the media relay device judging whether the sequence number of the first packet from the first UE is in the range indicated by the first service identifier, and judging whether the sequence number of the first packet from the second UE is in the range indicated by the second service identifier, if so, the verification is passed.

6. The method according to claim 4, wherein the first service identifier and the second service identifier are same.

7. The method according to claim 4, wherein the first service identifier and the second service identifier are different.

11. The method according to claim 5, wherein the first service identifier and the second service identifier are same.

12. The method according to claim 5, wherein the first service identifier and the second service identifier are different.

8. A system for establishing a media channel based on relay, comprising:

a media relay control server, configured to allocate a first service identifier and a second service identifier during a session negotiation process between a first User Equipment (UE) and a second UE, transmit the first service identifier to the first UE, transmit the second service identifier to the second UE, and transmit the first service identifier and the second service identifier to a media relay device; and

the media relay device, configured to receive the service identifiers reported by the first UE and the second UE, and verify, according to the first service identifier and the second identifier transmitted by the media relay control server, the service identifiers reported by the first UE and the second UE, and establish a media channel between the first UE and the second UE if the verification is passed.

9. The system according to claim 8, wherein the media relay device is configured to receive, after the session negotiation is ended, first media data packets transmitted by the first UE and the second UE and to acquire the service identifiers reported by the first UE and the second UE from the messages.

10. The system according to claim 9, wherein the media relay device is configured to receive, after the session negotiation is ended, binding requests transmitted by the first UE and the second UE before the first UE and the second UE transmit the first media data packets and acquire the service identifiers reported by the first UE and the second UE from the binding requests.